PulseAugur
EN
LIVE 00:07:41

Cursor IDE's critical zero-day vulnerability remains unpatched after 7 months

By PulseAugur Editorial · [2 sources] ·

A critical zero-day vulnerability in the AI-powered code editor Cursor allows for arbitrary code execution when a user opens a malicious project. The vulnerability, discovered by Mindgard, involves a planted `git.exe` in the project root that Cursor automatically executes without user interaction. Despite multiple attempts to report the issue over seven months, Cursor has reportedly failed to respond adequately, initially closing the report as out of scope and then ceasing communication. This lack of response is concerning given Cursor's large user base and reported valuation. AI

IMPACT Highlights potential security risks in AI-assisted development tools, urging caution with untrusted codebases.

RANK_REASON Disclosure of a security vulnerability in a widely used software tool.

Read on Mastodon — sigmoid.social →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

Cursor IDE's critical zero-day vulnerability remains unpatched after 7 months

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Disclosure of a security vulnerability in a widely used software tool.
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
77 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [2]

  1. Hacker News — AI stories ≥50 points TIER_1 English(EN) · Synthetic7346 ·

    Cursor 0day: When Full Disclosure Becomes the Only Protection Left

  2. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] ·

    Cursor 0day: When Full Disclosure Becomes the Only Protection Left https:// mindgard.ai/blog/cursor-0day-w hen-full-disclosure-becomes-the-only-protection-left

    Cursor 0day: When Full Disclosure Becomes the Only Protection Left https:// mindgard.ai/blog/cursor-0day-w hen-full-disclosure-becomes-the-only-protection-left # ai

    LINKS mindgard.ai/…/cursor-0day-when-full-discl…

RELATED ENTITIES

RELATED TOPICS