Security News Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution TheHackerNews Daniel Bender 15 Jul 2026 Share Cursor runs a repo-root git.exe when a Windows project opens, enabling code execution as the user. Seven months later, no patch or advisory exists.