1 story taggedgit.exe.
A security firm reported the flaw seven months ago. Cursor has yet to patch it.