The vulnerability nobody seems interested in fixingKey TakeawaysAfter loading a project, Cursor attempts to find git binaries at various locations including the current workspace. By creating a repository with a planted malicious git.exe in the root, the IDE will execute it with no user interaction and no prompting of the user. This occurs repeatedly on a cadence.Sometimes security research uncovers deeply technical vulnerabilities that require pages of explanation. This isn't one of those cases...