Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

A flaw in Cursor on Windows allows malicious cloned repositories to trigger code execution. Opening a repository with a file named git.exe in the project root causes Cursor to run it without any click, approval dialog, or warning. The binary executes with the user's permissions, accessing SSH keys and cloud tokens, and re-runs as long as the project stays open.