Mindgard / Aaron Portnoy (Jul 14, 2026): Primary disclosure.
- Windows Cursor auto-executes workspace-root git.exe during Git path resolution (e.g. git rev-parse —show-toplevel); no prompt
- Reported Dec 15, 2025; 197+ versions later still present in latest tested build
- Last verified PoC: Apr 30, 2026 against Cursor 3.2.16 (Calculator renamed to git.exe)
- HackerOne path: initially Informative/out of scope; reopened after reproduction; then months of silence
- Mitigations: AppLocker/Windows App Control path deny; open untrusted repos only in VM/Sandbox
- Distinct from CurXecute, MCPoison, DuneSlide
Public evidence last dated to Cursor 3.2.16 (Apr 30). Claims about later builds (e.g. 3.11) need independent confirmation.