Overview
Windows-specific untrusted-search-path flaw in cursor: opening a project whose root contains git.exe causes the IDE to execute it automatically (e.g. during git rev-parse --show-toplevel) with no prompt — arbitrary code execution as the user.
Timeline
- 2025-12-15: Discovered/reported by mindgard
- 2026-01: HackerOne reopen after Informative close; delivered to Cursor
- 2026-04-30: Last dated PoC verification — Cursor 3.2.16
- 2026-07-14: Full public disclosure; no CVE/advisory at disclosure
- Dark Reading: Cursor said it was working on a fix (post-disclosure comment)
Pipeline rumor of presence in Cursor 3.11 is unverified. Public evidence stops at 3.2.16 (Apr 30). Treat later-version claims cautiously.
Mitigations
- Do not open untrusted repos in Cursor on Windows until patched
- Use Windows Sandbox/VM; AppLocker path denies for workspace
*.exe