PulseAugur
EN
LIVE 00:07:34
Русский(RU) Cursor 3.2.16 на Windows: 14 июля раскрыли PoC — git.exe в root непроверенного репозитория запускался при открытии. Как…

Cursor IDE vulnerability allows execution of disguised git.exe

By PulseAugur Editorial · [1 sources] ·

A proof-of-concept (PoC) demonstrated a vulnerability in Cursor version 3.2.16 on Windows, where opening a malicious repository could cause the application to execute a disguised git.exe file located in the repository's root. Researchers disguised the Windows Calculator as git.exe to show that Cursor would launch it without user confirmation. While Cursor's developers consider this a user responsibility issue related to workspace trust, security experts recommend opening unknown repositories in isolated environments like Windows Sandbox and implementing path-based execution restrictions. AI

IMPACT This vulnerability highlights the need for enhanced security practices when using AI-powered development tools with external code repositories.

RANK_REASON The cluster details a specific vulnerability in a software tool (Cursor IDE) and discusses mitigation strategies, fitting the 'tool' category.

Read on dev.to — LLM tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Cursor IDE vulnerability allows execution of disguised git.exe

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
The cluster details a specific vulnerability in a software tool (Cursor IDE) and discusses mitigation strategies, fitting the 'tool' category.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
59 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — LLM tag TIER_1 Русский(RU) · Promptra Team ·

    Cursor 3.2.16 on Windows: PoC revealed on July 14 — git.exe in the root of an untrusted repository was launched upon opening. How...

    <p>14 июля Mindgard раскрыл PoC, в котором Cursor на Windows при открытии проекта находил и запускал <code>git.exe</code>, лежащий в корне репозитория. Для демонстрации исследователи переименовали Windows Calculator в <code>git.exe</code> и поместили его в папку проекта. Отдельны…

RELATED ENTITIES

RELATED TOPICS