BREAKING
Cursor Flaw Runs Code On Open
How The Attack Works
1
Clone repo
↓
2
git.exe in root
↓
3
Open in Cursor
↓
4
Code runs
0
mo
since report
0
+
version updates
0
M
active users
Two Sides Of The Debate
Researchers
Risk
●
Zero-click RCE
●
Opening should be safe
Cursor
Response
●
Out of scope
●
Use Workspace Trust
How To Protect Yourself
1
Sandbox or VM
↓
2
Enable Trust
↓
3
Scan before open
Burden Falls On Users
AI NEWS BLITZ
A disclosed Cursor flaw can run malicious code the moment you open a repository on Windows.