[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk2vcpvqxPzDiprJh6J7jDxr_mk0QkzFMZeAMKHlUqFs":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49,"controls":56},"9fd5a34c-1c91-4cef-b8a6-e20dd026f6d7","cursor-ai-editor-executes-malicious-gitexe-from-cloned-repos-without-warning","db34e459-1f4f-4be1-8c89-207f5b71f5d1","Cursor AI Editor Executes Malicious git.exe from Cloned Repos Without Warning","The root cause of this vulnerability is a dangerous configuration flaw in Cursor's Windows build: the application resolves executable names using the current working directory before checking system PATH locations, a classic 'binary planting' or 'DLL\u002FEXE hijacking' pattern. An attacker simply needs to name a malicious binary 'git.exe' and place it in a repository root — when a victim clones and opens the project, Cursor silently executes it. This is particularly severe because developers routinely clone untrusted or unfamiliar repositories as part of their workflow, making the attack surface wide. The unpatched status compounds the risk, as there is currently no vendor fix available, leaving all Windows Cursor users exposed to full credential and source code compromise.","**Immediate actions:**\n- Avoid cloning and opening untrusted or unverified repositories in Cursor on Windows until a patch is released.\n- Inspect any cloned repository root directory for unexpected executables (e.g., git.exe, curl.exe) before opening the project in any IDE.\n- Consider switching to an alternative code editor for untrusted repository review until Cursor issues a fix.\n\n**Configuration hardening:**\n- Configure Windows environments so that the system PATH is resolved before the current working directory, reducing binary planting risk across all applications.\n- Apply AppLocker or Windows Defender Application Control (WDAC) policies to block execution of unsigned or unexpected binaries from user-writable directories.\n- Restrict developer workstations so that SSH keys and cloud tokens are stored in protected credential managers rather than flat files accessible to arbitrary processes.\n\n**Detection measures:**\n- Enable endpoint detection and response (EDR) rules to alert on executions of common system tool names (git.exe, ssh.exe) originating from non-standard paths such as repository directories.\n- Monitor for unexpected child processes spawned by Cursor and alert on any process accessing SSH key files or cloud credential stores.\n- Implement code review pipeline scanning to flag repositories containing executable files in their root directories before developers clone them locally.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 10: Malware Defenses","CIS Control 18: Application Software Security","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 SA-11: Developer Security Testing","NIST SP 800-53 AU-12: Audit Record Generation","OWASP A08:2021 – Software and Data Integrity Failures","MITRE ATT&CK T1574.001: Hijack Execution Flow – DLL Search Order Hijacking","MITRE ATT&CK T1059: Command and Scripting Interpreter",{},"published","2026-07-15T12:21:13.653153+00:00","2026-07-15T12:21:13.328+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Fcursor-flaw-lets-malicious-cloned.html","cursor-flaw-lets-malicious-cloned-repositories-trigger-windows-code-execution-48833f","Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":38,"name":39,"slug":40,"description":41,"color":42},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":44,"name":45,"slug":46,"description":47,"color":48},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",[50],{"id":51,"date":52,"edition":53,"title":54,"audio_url":55},"8e21cb45-320b-4bd6-aea9-af9442197aa8","2026-07-15","afternoon","ThreatNoir Afternoon Brief — July 15","https:\u002F\u002Fcdn.threatnoir.com\u002Fpodcasts\u002F2026-07-15\u002Fthreatnoir-afternoon-brief-2026-07-15.mp3",[57,61,65],{"slug":58,"name":59,"problem":60},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":62,"name":63,"problem":64},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":66,"name":67,"problem":68},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]