Cursor is an editor. Why is it executing untrusted code when a folder is opened?... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

jeremyjh 43 days ago | parent | context | favorite | on: Cursor 0day: When Full Disclosure Becomes the Only...

Cursor is an editor. Why is it executing untrusted code when a folder is opened? Opening a folder is not equivalent to executing a script contained in the repo. How can you think that is ok?

dev_daftly 43 days ago [–]

It's not executing untrusted code, it's calling git when you have a malicious version of git on your system

jeremyjh 43 days ago | [–]

No, read the report. It will call an executable called git.exe in the untrusted repo.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact