# CVE-2026-63093: Cursor for Windows binary planting in workspace root

Source: https://junglewise.ai/threats/cve-2026-63093-cursor-for-windows-binary-planting-in-workspace-root  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-17. Updated: 2026-07-17  
License: CC BY 4.0 with a link back

CVE-2026-63093 · Severity: high · CVSS 8.8 · Published 2026-07-17

Cursor, a popular AI-powered code editor, is vulnerable to a security flaw that allows attackers to take control of a developer's computer. By tricking a user into opening a specially crafted project folder containing a malicious file disguised as a standard programming tool, the attacker can execute hidden code. This happens automatically when the project is opened and continues to run in the background without any further action or warning to the user.

Technologies: [Anysphere Cursor](https://junglewise.ai/threats/technologies/cursor). Vendors: [Anysphere](https://junglewise.ai/threats/vendors/anysphere).

## Quick answers

**Is CVE-2026-63093 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-63093 being exploited in the wild.

**How severe is CVE-2026-63093?** High severity, with a CVSS score of 8.8, published 17 July 2026.

**Which products and versions are affected?** Anysphere Cursor 3.2.16 and earlier.

**Is there a fix for CVE-2026-63093?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-63093 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-63093?** Check whether you run Anysphere Cursor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Cursor for Windows (v3.2.16 and earlier) is vulnerable to an Untrusted Search Path (CWE-426) flaw during its Git binary resolution process. When a workspace is opened, the IDE searches for the 'git.exe' binary and prioritizes the local repository root over system paths. An attacker can exploit this by distributing a malicious repository containing a 'git.exe' file; once the victim opens the folder in Cursor, the IDE automatically executes the binary under the current user's privileges. This execution occurs during startup and on a recurring timed cadence without user interaction or approval. As of the advisory date, the vendor has not released a patch, and researchers recommend opening untrusted repositories only in isolated environments.

## Affected products

- Anysphere, Inc. (Cursor) Cursor 3.2.16 and earlier

## Timeline

- 2025-12-15: disclosed: Initial discovery and report by Mindgard to Cursor security.
- 2026-07-17: advisory: Public disclosure by Mindgard and VulnCheck due to lack of vendor remediation.

## References

- [https://cursor.com/](https://cursor.com/)
- [https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left](https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left)
- [https://www.vulncheck.com/advisories/cursor-for-windows-rce-via-malicious-git-exe-in-workspace](https://www.vulncheck.com/advisories/cursor-for-windows-rce-via-malicious-git-exe-in-workspace)

## Related threats

- [Cursor AI editor sandbox escape via improper link resolution](https://junglewise.ai/threats/cve-2026-50549-cursor-ai-editor-sandbox-escape-via-improper-link-resolution)
- [Cursor AI Editor sandbox escape via agent-controlled working directory](https://junglewise.ai/threats/cve-2026-50548-cursor-ai-editor-sandbox-escape-via-agent-controlled-working)
- [Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious…](https://junglewise.ai/threats/cve-2025-64110-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions)
- [Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a…](https://junglewise.ai/threats/cve-2025-64108-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions)
- [Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings…](https://junglewise.ai/threats/cve-2025-64107-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions)