Agent terminal cannot reach local wired LAN devices while user terminal can

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

Description:
The Cursor AI agent’s terminal cannot ping or SSH to wired devices on my local network, while my regular macOS terminal running the exact same commands on the same Mac succeeds.

Steps to Reproduce:

  1. Have a Mac connected via WiFi to a router (192.168.0.1)
  2. Have wired devices on the same subnet (e.g., Raspberry Pis at 192.168.0.2 and 192.168.0.253)
  3. Ask the agent to run: ping -c 2 192.168.0.253
  4. Agent terminal returns: “No route to host”
  5. Run the same command in a regular macOS terminal: succeeds with ping responses

Expected Behavior:
Agent terminal should have the same network access as user’s terminal on the same machine.

Actual Behavior:
Agent terminal cannot reach wired LAN devices. Returns “No route to host” for ICMP and TCP (SSH).

What Works in Agent Terminal:

  • Pinging the router (192.168.0.1)
  • Pinging internet hosts
  • Connecting via Tailscale overlay network (100.x.x.x addresses)

What Fails in Agent Terminal:

  • Pinging wired devices on local LAN
  • SSH to wired devices on local LAN

Environment:

  • OS: macOS 25.0.0 (darwin)
  • Cursor version: latest as of Dec 19, 2025
  • Network: 192.168.0.0/24, Mac on WiFi (5GHz), target devices on ethernet

Workaround:
Used Tailscale as a jump host to reach local wired devices, or ran commands manually in user terminal and pasted results back to agent.

Notes:
This suggests the agent terminal runs in a sandbox with restricted local network access. The sandbox appears to allow internet and router traffic but blocks or fails to route traffic to other devices on the local LAN segment.

Steps to Reproduce

  1. Have a Mac connected via WiFi to a router (192.168.0.1)
  2. Have wired devices on the same subnet (e.g., Raspberry Pis at 192.168.0.2 and 192.168.0.253)
  3. Ask the agent to run: ping -c 2 192.168.0.253
  4. Agent terminal returns: “No route to host”
  5. Run the same command in a regular macOS terminal: succeeds with ping responses

Expected Behavior

it would work

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.2.14
VSCode Version: 1.105.1
Commit: 1685afce45886aa5579025ac7e077fc3d4369c50
Date: 2025-12-11T01:12:35.790Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Darwin arm64 25.0.0

For AI issues: which model did you use?

opus 4.x

Does this stop you from using Cursor

Yes - Cursor is unusable

Hey, thanks for the report.

This looks like a macOS Local Network permissions limitation. Could you check:

System Settings > Privacy & Security > Local Network - make sure Cursor is listed and the permission is enabled.

If that looks fine, please also try:

  1. Remove Cursor from the Local Network list and restart the app - macOS should prompt for permission again.
  2. Check if ping works from Cursor’s built-in terminal (not the agent terminal, just Ctrl+`).

Let me know if this helps!

That was the fix! (system settings) Sheesh, i thought i had tried everything. Cursor/Opus also attempted to diagnose the problem and tried many many things unsuccessfully. Thanks!

Hey @deanrie ,

I’m having exactly the same problem, however for me, Cursor isn’t listed in System Settings > Privacy & Security > Local Network. It also doesn’t ask for permissions. I tried uninstalling it from Apps and Re-installing, to no success either.

Any idea how to get the permission added as its not possible to do that manually?

Hey @Wasabi,

Try this:

  1. Enable the Legacy Terminal: Cursor Settings > Agents > Inline Edits & Terminal > check “Use legacy terminal for agent”.

  2. Check if Cursor shows up under a different name in System Settings > Privacy & Security > Local Network. Sometimes macOS lists it as another app (similar case: Connecting to local network in MacOS Sequoia).

  3. Try running a ping from Cursor’s built-in terminal (Ctrl+`, not the agent terminal), for example: ping 192.168.0.1. This should trigger the system permission prompt.

  4. If it still doesn’t work, try a full reinstall of Cursor (make a backup first):

    • Delete the app
    • Delete ~/Library/Application Support/Cursor
    • Delete ~/.cursor
    • Reinstall Cursor

Also, could you share:

  • What macOS version are you on?
  • What Cursor version are you on (Help > About)?

Let me know if this helps.

Hey @deanrie ,

thanks for the fast feedback! I’ve tried the suggestions in order and found 2 to work for me.

Just for testing I enabled all Apps listed there (none of them was Cursor), and suddenly communication started to work. By method of elimination I found toggling the app called Bruno (which is an OS alternative to Postman) also toggled Cursor… that’s super weird.

Anyway, requested information:

  • macOS version: Tahoe 26.1
  • Cursor version: 2.2.44

Let me know I there’s any additional information that could help you narrow down the root cause if desired, happy to support.

1 Like

Great that you were able to find a solution! This is really strange macOS behavior - when Cursor doesn’t show up separately in the Local Network list, but the permission is controlled through another app (in your case, Bruno).

Thanks for the details on the versions and the fix. This is very useful information that could help other users with similar issues.