Cursor IDE Auto-Executes Malicious Code in Poisoned Repos

Mindgard disclosed a critical flaw in the Cursor AI development client where Cursor searches for Git binaries including within the workspace; an attacker can plant a malicious git.exe in a repository root which Cursor will automatically execute when the project is opened, allowing arbitrary code execution under the developer's privileges. Mindgard reported the issue to Cursor months earlier with no fix, published a PoC (renaming Calculator to git.exe) and recommends mitigations such as AppLocker or opening untrusted repos only in isolated environments.