charles
November 12, 2025, 3:42am
1
sonnet decided the best way to undo a change was to do a git checkout of the file vaporizing everything prior done in the workspace.
Cursor did not block the command or ask for authorization to run git checkout. What the what?!
no idea
MacOS
Version: 2.0.73
Yes - Cursor is unusable
deanrie
November 12, 2025, 5:42am
3
Hey, thanks for the report. This confirms the bug - sandbox mode is bypassing your command allowlist and running git checkout even though you explicitly excluded it.
This is a known issue: the new sandbox in Cursor 2.0 bypasses the allowlist for git commands: Agents git committing when they shouldn't
Fix:
Open Settings → Agents → Auto Run
Enable “Legacy Terminal Tool”
This restores proper allowlist enforcement and stops the agent from running git checkout without approval
Your allowlist looks carefully configured (I can see you excluded destructive commands like git checkout), so the Legacy Terminal Tool should fit your setup well.
Let me know if this resolves it.
charles
November 12, 2025, 6:26pm
4
Will give it a shot, ty!
Took a moment to find the setting, for others its
cursor settings→agents→inline editing & terminal→legacy terminal tool (not under auto run, at least in my version)
system
December 4, 2025, 6:26pm
5
This topic was automatically closed 22 days after the last reply. New replies are no longer allowed.
