Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Cursor and several AI/developer tools on Windows can run an unqualified git.exe from a project's root when a repository is opened, allowing a malicious git.exe (e.g., renamed calc.exe) to execute as the logged-in user without prompts. Mindgard's disclosure found no patch or advisory from Cursor; related findings affect multiple vendors, leaving defenders to apply mitigations such as AppLocker/EDR or opening untrusted repos in sandboxes.