Cursor for Windows version 3.2.16 contains a binary planting flaw that lets a remote attacker execute arbitrary code by placing a malicious git.exe file in the repository root. When a developer clones or opens the crafted repository, the IDE starts up and repeatedly runs the workspace‑resident git.exe without user interaction, giving the malicious binary the same privileges as the current user. This flaw maps to CWE‑426 – Untrusted Search Path – and results in full remote code exploitation for the user running the IDE.

The affected vendor is Anysphere, Inc. and the product is Cursor for Windows. Targeted is the 3.2.16 release of the software.

The CVSS score of 8.7 places the vulnerability in the high severity band, while the EPSS score of less than 1% indicates that exploitation events are rare but still plausible. The vulnerability is not listed in the CISA KEV catalog. An attacker can trigger the flaw by uploading a crafted repository containing a malicious git.exe to any repository that will be cloned by a developer. Once the repository is cloned or opened, Cursor automatically resolves and executes the bundled git.exe at startup and on a recurring cadence, allowing the attacker to run arbitrary commands under the user’s privileges. The risk therefore remains significant, especially in environments where developers routinely clone external repositories without prior inspection.