Cursor 0-Day Allows Arbitrary Code Execution by Simply Opening a Repository
Brief
A newly disclosed Cursor IDE vulnerability demonstrates how opening an untrusted repository on Windows could lead to arbitrary code execution without prompt injection, AI-agent interaction, or any additional user approval.
While the original issue centered on malicious git. exe binaries, subsequent research found the attack surface extended to other executables, including hatch. exe , under specific project conditions.
AI security firm Mindgard initially reported the Cursor binary-planting flaw in December 2025 and publicly disclosed technical details in July 2026. The issue, tracked as CVE-2026-63093, involved Cursor’s handling of Git discovery during project load.
Cursor 0-Day Allows Arbitrary Code Execution
Cursor performs Git-related commands such as git rev-parse --show-toplevel during workspace initialization. On affected Windows configurations, this lookup could resolve a git.