Update
Not Cursors fault. I thought Cursor had a built in self-prompt mode that could browse the web on its own and that that system went haywire.
TLDR
Using Ctrl+L feature on Cursor caused me to loose control of my computer, even after rebooting into another OS.
Is this a bug or do I have to wipe my hard drive and change all my passwords?
System
Ubuntu 64 Bit
I’m unsure of the version - hesitant to log back into device.
HP Omen Desktop
Dual Boot with Windows 11
Preface
I installed Cursor a few months ago and used it for the first time today. Before using it, a popup showed on the bottom left of the screen asking me to update. I did update and Cursor restarted.
The Problem
I selected a block of TypeScript code and pressed Ctrl+L to ask the AI about the code. Instead of typing anything into the prompt that showed on the right side of the screen, I pressed esc because I wanted to try something else.
After pressing esc my mouse and keyboard started acting on their own:
My system began taking screen shots of my other monitor (dual monitor system) that had my email open in the browser (Brave Browser).
The system began typing in random gibberish and something I had searched in the browser a few minutes ago.
Mouse began moving and clicking on things on its own.
I struggled to restart the device and booted into Windows 11 (dual boot system). On the login screen of Windows 11 the system acts on its own and:
Types characters into the password/pin field.
Makes the screen go blacnk.
It does this on the Windows 11 login screen for about 10 seconds before completely stopping, at which point I can log in.
I hope this is just a bug, otherwise I’m going to have to wipe my entire device and change all my passwords.
Here’s the deal: official downloads are only from the main site. Don’t trust any other repo or early access links—those files could be infected.
Here’s what I’d do if I were in your shoes: grab a USB drive, back up anything important (if you can), wipe the entire disk, and reinstall Windows from scratch. Once you’re back up, lock it down as much as possible. Install Malwarebytes—that’s non-negotiable. You can keep Defender running too if you want, but Malwarebytes is better at catching this kind of malicious code.
Hmm its impossible that Cursor could by itself take control of anything if the app is not running. e.g. when you restart and boot into another OS especially on the login screen.
I second the app download advice and antivirus, plus you can run one also in Ubuntu to prevent effects on windows through shared files or shared partitions.
If you dont have another USB drive for backing up data:
You could, depending on the capability of your machine connect it as USB drive to another device that has a proper antivirus and firewall and let it check the content of the drive.
Or if drive is removable just do that with the drive.
CTRL + L just opens the chat (and or assigns a file to chat)
So it doesnt even run any AI output on your machine.
Yeah, I think you’re right.
Booted into my Bios settings and it started acting on its own. HP Omen Desktop flashed red and started beeping (must be built in security measure.
Going to change passwords and wipe everything.
Apologies, I suspected Cursor because this happened the same time I tried to use it for the first time.
Seems near impossible odds that a USB connection issue would cause screen shots of my browser window, pasting contents from my clipboard (I think that’s what it did), and random password attempts in a different OS.
So dad because I wanted to try out Cursor on a new project.
I’m off to burn my desktop in my backyard fire pit.