Cursor coding tool bug lets attackers run code, not fixed in 7 months

Security firm Mindgard revealed that Cursor, an AI-powered coding tool bought by Elon Musk's SpaceX, has a serious bug. Attackers can place a fake git.exe file in a repository, and Cursor runs it automatically without any user action. A proof-of-concept showed renaming Windows Calculator to git.exe triggers it when Cursor opens the repo.

The bug was reported to Cursor's security team on December 15, 2025, but it still works on Windows Cursor version 3.2.16 as of April 30, 2026. Mindgard got no response after multiple follow-ups between February and April 2026, and even after saying they'd go public on June 1, 2026, the fix remains unclear.

Cursor is a code editor with AI help, bought by SpaceX in June for $60 billion. The bug needs no clicks or commands and shows no warnings, putting developers and teams at risk.