🛡️ **CURSOR IDE — UNPATCHED ZERO-DAY ENABLES ARBITRARY CODE EXECUTION ON WINDOWS**
Published Sunday, July 26, 2026 at 04:13 PM PT BLUF: Cursor IDE contains an unpatched zero-day vulnerability on Windows that automatically executes a malicious git.exe file when a developer clones or opens a repository. An attacker can craft a malicious repository that runs arbitrary code during repository initialization. Windows developers using Cursor are at immediate risk. Immediate action: Do not clone or open untrusted repositories in Cursor until a patch is available. Use alternative Git clients (native Git Bash, GitHub Desktop, or command line) for repository operations on shared/untrusted sources. ...