Agent running commands that are not on allowlist

[jstrom (Johan)]

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

A new level of excitement to the development process, as the agent now apparently can run whatever it wants without permission:

Steps to Reproduce

No idea beyond doing anything that makes the agent want to run a command not on allowlist?

Expected Behavior

Obviously that it stops and asks for permission.

Screenshots / Screen Recordings

Operating System

Windows 10/11

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.0.77 (user setup)
VSCode Version: 1.99.3
Commit: ba90f2f88e4911312761abab9492c42442117cf0
Date: 2025-11-13T23:10:43.113Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Windows_NT x64 10.0.26100

For AI issues: which model did you use?

Gemini 3 Pro

For AI issues: add Request ID with privacy disabled

5b3ea8fe-7df2-4616-b8bd-8c8a4bd8872c

Additional Information

Your “Bug report” tool here in this forum is ■■■■■■■ amazing. It rejected my screenshot because it’s an unsupported format when the file extension was “PNG” (all caps, which the Windows screenshotting tool did on its own) and then proceeded to accept it anyways. Probably.

Does this stop you from using Cursor

Sometimes - I can sometimes use Cursor

[deanrie]

Hey, thanks for the report. From your screenshot I can see that the Legacy Terminal Tool is already enabled, which means the standard workaround isn’t working in your case.

This is a critical issue, your allowlist should be enforced regardless of the settings. I’ll pass this on to the team.

The team will investigate why the Legacy Terminal Tool isn’t preventing this bypass on your system.

[jstrom (Johan)]

I never heard of the “Legacy Terminal Tool” before, but a quick search in options shows it disabled:

And either way I don’t think I have a very strange shell configuration, it’s simply Windows with the git bash profile since most/all of the models aren’t very good at Powershell and also keep forgetting that it’s Powershell and using bash commands anyways.