Cursor AI Coding Agent Vulnerability Lets Attackers Run Code on Developers’ Machines

Gbhackers •Mayura Kathir • April 29, 2026

A newly disclosed high-severity vulnerability in the Cursor AI-powered coding environment could allow attackers to execute arbitrary code on a developer’s machine, raising fresh concerns the security of AI-assisted development workflows. The vulnerability was officially published by Cursor in February 2026, following remediation efforts. Researchers emphasized that testing was conducted under strict ethical guidelines […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cursor IDE Vulnerability Allows RCE via Malicious Git Repositories A critical vulnerability in the Cursor IDE, tracked as CVE-2026-26268, has been disclosed, allowing arbitrary code execution (RCE) on developers' machines. The flaw arises from the interaction between Cursor's AI agent and standard Git features, enabling attackers to execute malicious code when a developer clones a compromised repository. Specifically, the vulnerability exploits Git hooks and bare repositories, where an attacker can embed harmful scripts that execute during routine Git operations. The issue affects Cursor versions prior to 2.5 and has been rated with a severity score of 9.9 out of 10 by the NVD. As of now, there are no reports of in-the-wild exploitation, and a patch has been released by Cursor. Security experts warn that the expanded capabilities of AI-driven IDEs increase the risk of such vulnerabilities. Developers are advised to update their Cursor IDE to the latest version to mitigate this risk. 3 sources 74

Cursor AI Coding Agent Vulnerability Lets Attackers Run Code on Developers’ Machines

The full story

Extracted Entities

Companies (1)

Platforms (1)