Cursor Able to git commit with out user permission in sandbox mode

[soft (Connor)]

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

1. agent mode
2. do some work
3. model will sometime think to commit the work via sandboxed mode

---

I don’t have git commit allowed on autorun.

Steps to Reproduce

1. agent mode
2. do some work
3. model will sometime think to commit the work via sandboxed mode

Screenshots / Screen Recordings

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.0.69
VSCode Version: 1.99.3
Commit: 63fcac100bd5d5749f2a98aa47d65f6eca61db30
Date: 2025-11-07T18:21:29.650Z (1 wk ago)
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Darwin arm64 24.6.0

For AI issues: which model did you use?

gemini 3

Does this stop you from using Cursor

Sometimes - I can sometimes use Cursor

[deanrie]

Hey, thanks for the report. This is a known issue: sandbox mode bypasses the Command Allowlist for git commands.

Temporary workaround:

• Open Cursor Settings → Agents → Inline Editing & Terminal
• Enable “Legacy Terminal Tool”

This should restore proper Command Allowlist enforcement.

This issue has already been reported by other users and is being tracked by the team.

Related topics:

• Agents git committing when they shouldn't
• 2.0.73: executing unauthorized commands!

Let me know if enabling the Legacy Terminal Tool fixes the issue for you.