Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay

#### Executive summary: Mindgard disclosed a high-severity vulnerability (CVE-2026-63093, CVSS 8.8) in Cursor for Windows (3.2.16) where Cursor may execute a malicious git.exe placed in the root of a cloned repository, enabling attacker-controlled code execution with the user's privileges; Cursor patched the flaw after private disclosure and shortly before the public report, and the issue raises significant supply-chain and developer workstation compromise concerns.