# CRITICAL: Cursor Replacing Valid URLs with Fabricated Discord Links

**URL:** <https://forum.cursor.com/t/critical-cursor-replacing-valid-urls-with-fabricated-discord-links/62146>\
**Category:** Bug Reports\
**Created:** [March 10, 2025, 9:55pm UTC](https://forum.cursor.com/t/critical-cursor-replacing-valid-urls-with-fabricated-discord-links/62146 "2025-03-10T21:55:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![cb0b6baef60c62ffba20](https://avatars.discourse-cdn.com/v4/letter/c/7feea3/32.png) [@cb0b6baef60c62ffba20](https://forum.cursor.com/u/cb0b6baef60c62ffba20)\
**Post date:** [March 10, 2025, 9:55pm UTC](https://forum.cursor.com/t/critical-cursor-replacing-valid-urls-with-fabricated-discord-links/62146/1 "2025-03-10T21:55:22Z")

</div>

Issue:  
Cursor occasionally replaces valid, intentionally provided Discord links (e.g., discord.gg/validServer) with fabricated or non-existent Discord URLs (e.g., discord.gg/[made\_up\_name]). This happens unpredictably during regular edits or generations made by Cursor.

Impact:  
This led to one of our websites redirecting users to a fabricated Discord URL (discord.gg/[made-up-name]), which initially did not exist. A malicious actor later exploited this by creating a Discord server at that URL, posing significant security risks to users who were redirected unknowingly. The original, correct URL was overwritten without our consent or awareness.

Replication Challenge:  
The issue occurs randomly, making it difficult to reliably reproduce. It has happened three separate times without clear triggers or explicit instructions to alter URLs.

Expected Behavior:  
Cursor should never alter or fabricate URLs, especially Discord server addresses. Explicitly provided URLs must remain unchanged unless explicitly instructed otherwise.

Recommended Action:  
Cursor should implement safeguards at the prompt or processing level to prevent automatic URL replacements or fabrications, particularly for sensitive links such as Discord addresses.

---

<div class="post-metadata">

**Author:** ![system](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/system/32/99069_2.png) [@system](https://forum.cursor.com/u/system)\
**Post date:** [April 9, 2025, 9:55pm UTC](https://forum.cursor.com/t/critical-cursor-replacing-valid-urls-with-fabricated-discord-links/62146/2 "2025-04-09T21:55:39Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
