Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 15-Jul-2026 01:41:14 JST Kevin Beaumont

   Pretty funny Cursor issue - if you put a file named git.exe in a repo and open it in Cursor, it blindly runs said git.exe file https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left

   • Embed this notice
     Will Dormann (wdormann@infosec.exchange)'s status on Thursday, 16-Jul-2026 23:52:47 JST Will Dormann

     in reply to

     @GossiTheDog
     OK, I guess my mistake was not WAITING THIRTY MINUTES. 🤦♂️
     https://infosec.exchange/@wdormann/116930022612132890

   • Embed this notice
     Will Dormann (wdormann@infosec.exchange)'s status on Thursday, 16-Jul-2026 23:52:48 JST Will Dormann

     in reply to

     @GossiTheDog
     I see it check for git.exe, but I see no evidence of it attempting to run it. 🤷♂️

   • Embed this notice
     Will Dormann (wdormann@infosec.exchange)'s status on Thursday, 16-Jul-2026 23:52:48 JST Will Dormann

     in reply to

     @GossiTheDog
     I mean, if I tell Cursor to run git, then it'll run the one in the repo. Which I guess is bad.

     But that's significantly more user interaction required than the A developer opens a repository in Cursor on Windows requirement that Mindgard says. 🤷♂️

     Somewhat interesting that Cursor recognized the presence of a fake Windows Calculator git.exe, but only after executing it. 😂