CVE-2026-26268: Cursor Git Hook RCE — Cloning a Repo Can Own Your Machine
A CVSS 9.9 vulnerability in Cursor, CVE-2026-26268, allows attackers to execute arbitrary code on a developer's machine by cloning a malicious repository, as disclosed by Novee Security. The flaw, whi…