How to Check if You're Affected by CVE-2026-26268 in Cursor (and What to Do)

Short summary

CVE-2026-26268 is a high-severity vulnerability in Cursor IDE (pre-2.5) allowing malicious Git repositories to execute arbitrary code through hook scripts without user confirmation. Check your version, audit untrusted repos' .git/hooks/ directories, rotate credentials if affected, and update to Cursor 2.5+.

• •Cursor versions before 2.5 allow malicious repositories to execute arbitrary code via Git hooks without user approval
• •Check your version, audit .git/hooks/ in untrusted repos, and update to 2.5+ immediately
• •Rotate credentials if you opened unfamiliar repositories on pre-2.5 Cursor

Generated with AI, which can make mistakes.