Expired50% confidenceFactExact time
Cursor has a 0-day vulnerability whereby when a user opens or browses a Git repository containing an implanted malicious payload, the malicious program is executed immediately without any confirmation.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/21/2026
First Seen
Valid until: 10/19/2026(expired)
Sources
Related Claims
UnverifiedAt the start of training, Cursor deletes Git history and sets a network access whitelist to prevent the model from cheating (eval hacking).68% similarPartially VerifiedCursor 1.0 adds BugBot, an AI code review feature that can automatically review GitHub Pull Requests and identify potential bugs.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/578027API
curl https://kongchang.com/api/v1/knowledge/claims/578027MCP
get_claim(id=578027)