Diamond Member ThaHaka 0 Posted 19 hours ago Diamond Member Share Posted 19 hours ago This is the hidden content, please Sign In or Sign Up Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute. Whatever that binary does, it does as you, with your source, your SSH keys and your cloud tokens. Cursor keeps re-running it for as long as the project stays open. No prompt This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/321661-h4ckn3wscursor-flaw-lets-malicious-cloned-repositories-trigger-windows-code-execution/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.