Critical Cursor bug could turn routine Git into RCE

A critical vulnerability (CVE-2026-26268, CVSS 9.9) in the Cursor AI IDE allows arbitrary code execution on a developer's machine via malicious Git repositories. An attacker can embed a bare repository with a malicious pre-commit hook inside a legitimate project. When Cursor's AI agent autonomously performs Git operations like checkout, the hook executes attacker-controlled code outside the sandbox. The attack requires no phishing — just cloning a repository is enough. The flaw stems from Cursor's AI agent autonomously running Git operations without sufficient safeguards, unlike traditional passive IDEs. It has been patched in Cursor version 2.5, with no known in-the-wild exploitation reported.