Cursor Able to git commit with out user permission in sandbox mode

Support Bug Reports
1

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

  1. agent mode
  2. do some work
  3. model will sometime think to commit the work via sandboxed mode

I don’t have git commit allowed on autorun.

Steps to Reproduce

  1. agent mode
  2. do some work
  3. model will sometime think to commit the work via sandboxed mode

Screenshots / Screen Recordings

image.png
image.png2542×622 182 KB

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.0.69
VSCode Version: 1.99.3
Commit: 63fcac100bd5d5749f2a98aa47d65f6eca61db30
Date: 2025-11-07T18:21:29.650Z (1 wk ago)
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Darwin arm64 24.6.0

For AI issues: which model did you use?

gemini 3

Does this stop you from using Cursor

Sometimes - I can sometimes use Cursor

2

Hey, thanks for the report. This is a known issue: sandbox mode bypasses the Command Allowlist for git commands.

Temporary workaround:

  • Open Cursor Settings → Agents → Inline Editing & Terminal
  • Enable “Legacy Terminal Tool”

This should restore proper Command Allowlist enforcement.

This issue has already been reported by other users and is being tracked by the team.

Related topics:

Let me know if enabling the Legacy Terminal Tool fixes the issue for you.