I can also confirm that I have this problem, and that it seems to be comorbid with cursor trying to use global paths and not having a good handle on the current workspace. I am running over remote-ssh if that matters.
Turning off file protection bypasses the issue, but I don’t love that as a solution