that sounds like Cursor has a bug and vuln on Windows to me