Approved changes feed: RSS · Atom

cpe:2.3:a:anysphere,_inc.:cursor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAnysphere, Inc. (50de32fa-b27f-5108-bcbd-60e5a6ff638b)
ProductCursor (5e6bb6cc-9ca2-5b95-9089-1cdffd7aab38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-63093 vulnerable 2026-07-29 01:06:19.297751 Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace
HIGH (8.8)
Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves and executes the workspace-resident git.exe during IDE startup and on a recurring timed cadence without any user interaction, running the malicious binary under the privileges of the current user.
Published: 2026-07-17T14:23:41.848Z
Updated: 2026-07-28T01:49:58.652Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.