Cross-project file deletions

Bug Reports
1

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

I told the AI to review code files in another project to understand the context, as we were updating the plan for a new project. Once I accepted the plan, it started deleting files in the other project to build out the features. I realised what it was doing when I saw the ‘rm’ command being run on the other project ‘src’ folder and stopped the request, then told it not to make changes in the other project, it should be writing code from scratch in the current project. It responded based on the attached screenshot. I also have file-deletion protection on, but that did nothing.

Steps to Reproduce

Have not tried to replicate it. We had just finished the plan and then it ran the rm command on the src directory of the other project. Then it rand the mkdir command to create new directories.

Expected Behavior

It should understand it context based on the active project in the Cursor app, it should not be deleting files in other projects, and should not be deleting files if file-delete protection is enabled.

Screenshots / Screen Recordings

AI acknolwdges deleting files.png
AI acknolwdges deleting files.png1224×378 28.6 KB

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.0.69
VSCode Version: 1.99.3
Commit: 63fcac100bd5d5749f2a98aa47d65f6eca61db30
Date: 2025-11-07T18:21:29.650Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Darwin x64 24.4.0

For AI issues: which model did you use?

There are 5 active models, so I am not sure which one is behind the current agent. Composer 1, Sonnet 4.5, GPT 5 Codex High, Haiku 4.5, Grok Code,

For AI issues: add Request ID with privacy disabled

Not sure how to get the Request ID

Additional Information

There are other defects, but I will dig into them more and send them separately.

Does this stop you from using Cursor

No - Cursor works, but with this issue

2

Hey, thanks for the report. Could you share:

  • The Request ID from the chat menu (you’ll need to disable Privacy Mode in Settings first)
  • Your Agent settings - especially the status of Auto-run and Auto-apply
  • How the projects were opened - were both in the same window? How did you reference the other project?

This looks like a real issue with workspace boundaries. There are similar reports of the Agent getting confused about context and file locations. I’ll pass this to the team.

In the meantime:

  • Use git/version control to recover and protect changes
  • Try not to have multiple projects open when using the Agent
3

Sorry for the delayed response. I upgraded to the latest version of cursor so I will try and replicate it. I will close this request and if it happens again I will open a new one, or add to someone elses.