CVE-2026-63093: Cursor on Windows ran a git.exe planted in the project folder

Vulnerability · Cursor · HIGH

Incident dateNot stated

DisclosedJul 17, 2026 (CVE record; lists public date Jul 14, 2026). Cursor forum response Jul 15, 2026. Mindgard post metadata shows Jun 17, 2026.

Added hereOct 14, 8:55 PM ET

Last verifiedOct 14, 2026

Summary

Mindgard reported that Cursor on Windows would find and run a file named git.exe sitting in the root of an opened project, both at startup and repeatedly afterwards, with no extra click. The CVE record (CVE-2026-63093, assigned by VulnCheck) lists Cursor for Windows 3.2.16 and scores it CVSS 4.0 8.7. Cursor first said the report was out of scope for its bug bounty and that it had not kept the researcher updated in time. An August 2026 update says Git is now launched from a validated absolute path and tells users to update to Cursor 3.13.25 or later. macOS and Linux were not affected, per Cursor.

Severity

HIGH Code runs as the user just from opening a folder on Windows. CVSS 4.0 8.7 per the CVE record. It needs a git.exe already planted in the project root, and Cursor says it is fixed in 3.13.25.

Timeline

Apr 30, 2026
Mindgard's last recorded test reproduces it on Cursor 3.2.16 for Windows.
Jul 15, 2026
Cursor posts a forum response: out of scope for its bug bounty, Windows only, and it apologizes for not closing the loop with the researcher.
Jul 17, 2026
CVE-2026-63093 published by VulnCheck (record lists a public date of Jul 14, 2026).
Aug 2026
Cursor updates its post: Git is spawned by validated absolute path; update to 3.13.25 or later.

How it happened

When it opened a project, Cursor looked up git by name. On Windows that search can include the current folder, so a git.exe in the repository root ran instead of the real Git, under the user's account. The CVE record classifies it as CWE-426 (Untrusted Search Path). Mindgard says it spent seven months trying to get a response before publishing. Cursor says it operates a shared-responsibility model for untrusted workspaces and points to Workspace Trust, which opens untrusted folders in restricted mode. Mindgard's post carries a published date of Jun 17, 2026 in its page data, while the CVE record lists Jul 14, 2026; we show both.

How to check your app

On Windows, update Cursor to 3.13.25 or later.
Turn on Workspace Trust so folders you have not reviewed open in restricted mode.
Before opening a repository someone sent you, look for an unexpected git.exe in its root.

Sources

Corrections and updates

None. Re-checked against every source on Oct 14, 2026.