The Download: AI’s real extinction threat and age-reversal tech for eyes
technologyreview.com·4d ago
AI Engineering
Hacker News·Jul 14·5 min read
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
TL;DR
Cursor has a critical vulnerability that allows malicious git binaries to execute without user interaction. By planting a harmful git.exe in a project repository, the IDE automatically runs it repeatedly.
✦ Why It Matters
Engineers should audit their development environments for unauthorized binaries to prevent potential exploitation.
Key Takeaways
- Do not open untrusted repositories in Cursor until patched.
- Use AppLocker or Windows App Control to block malicious executables.
- Isolate development environments using VMs or Windows Sandbox.
- Stay informed about Cursor's security updates and engage with their support.
How It Works
When a developer opens a project in Cursor, it searches for git binaries in various locations, including the project root. If a malicious git.exe is present, Cursor executes it automatically, leading to arbitrary code execution without any user interaction.