Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay

{
  "signal_id": "1ca88306-a1d8-58bf-f941-5ed69573a180",
  "signal_type": "news",
  "signal_subtype": "security_incident",
  "detected_at": "2026-07-28T17:22:10+00:00",
  "company": {
    "name": "Cursor",
    "domain": "cursor.com"
  },
  "data": {
    "url": "https://www.techrepublic.com/article/news-cursor-git-code-execution-vulnerability-cve-2026-63093/",
    "title": "Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay - TechRepublic",
    "excerpt": "Opening a Git repository in a vulnerable version of Cursor could be enough to give attackers code execution on a developer’s Windows machine. Security researchers at Mindgard discovered that Cursor would execute a malicious git.exe file planted in the root of a cloned repository, allowing attacker-controlled code to run with the logged-in user’s privileges. The company quietly patched the flaw roughly seven months after receiving a private disclosure, shortly before researchers made the vulnerability public. Seven months after the vulnerability was initially disclosed, Cursor has silently patched it, just before Mindgard’s public disclosure of the issue. Because AI coding assistants sit at the center of development workflows, weaknesses in how they launch trusted tools can expose developers during routine tasks such as cloning repositories. As these tools become more embedded in everyday developer workflows, longstanding security weaknesses such as untrusted search paths can have far greater consequences because the editor itself becomes part of the execution chain. Mindgard, a cybersecurity firm, said it discovered the vulnerability last year and privately disclosed it to Cursor on Dec. 14. The vulnerability stems from how Cursor handles Git files during project initialization. According to a Proof of Concept demonstration from Mindgard, as cited by Latest Hacking News , when...",
    "product": "Cursor for Windows",
    "summary": "Cursor's AI coding assistant for Windows was found to have a high-severity vulnerability (CVE-2026-63093) that could allow remote code execution if a developer opens a malicious Git repository.",
    "planning": false,
    "image_url": "https://assets.techrepublic.com/uploads/2026/07/cursor-1.jpg?f=jpeg",
    "confidence": 1,
    "product_data": {
      "name": "Cursor for Windows",
      "full_text": "Cursor for Windows version 3.2.16",
      "fuzzy_match": false,
      "release_type": "version"
    },
    "product_tags": [
      "general_technology",
      "online_technology"
    ],
    "published_at": "2026-07-28T17:22:10Z",
    "vulnerability": "CVE-2026-63093",
    "article_sentence": "Opening a Git repository in a vulnerable version of Cursor could be enough to give attackers code execution on a developer’s Windows machine."
  }
}

curl https://signals.autobound.ai/v1/signals/1ca88306-a1d8-58bf-f941-5ed69573a180 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"cursor.com","limit":20}'