Executive Summary
An unpatched Cursor flaw lets a malicious repository containing a git.exe in its root run code, because Cursor executes it automatically.
What Happened
An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically. The post Unpatched Cursor Vulnerability Exposes Users to Code Execution appeared first on SecurityWeek .
Affected Products
- Cursor
Vulnerability / Attack Technique
Binary planting in a repository root
Technical Mechanism
When a project is opened, Cursor runs the git.exe it finds in the project folder instead of the system Git.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Opening an untrusted repo in an AI IDE is enough to run code. RealGround analysis: open untrusted projects only in isolated environments until fixed.
Recommended Controls
- Open untrusted repositories in a VM or container
- Watch for executables in repository roots
Related RealGround Service
AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/unpatched-cursor-vulnerability-exposes-users-to-code-execution/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.