Cursor was able to read_file outside project directory

Bug Reports
1

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

Inadvertently the agent was able to read a file outside the project directory in a conversation. I was able to reproduce in a simple use case, this used to be not allowed and protected us from exposure of sensitive files outside the project dir.

Steps to Reproduce

See screenshot.

Expected Behavior

Cursor should never allow the agent read_file outside the project directory, unless explicitly added to context somehow.

Screenshots / Screen Recordings

image (5).png
image (5).png738×692 48.6 KB

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.0.69 (Universal)
VSCode Version: 1.99.3
Commit: 63fcac100bd5d5749f2a98aa47d65f6eca61db30
Date: 2025-11-07T18:21:29.650Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Darwin x64 23.6.0

For AI issues: which model did you use?

Model: sonnet 4, gpt5

Does this stop you from using Cursor

No - Cursor works, but with this issue

1 Like
2

Thanks for the report. Can you please check if you’re still facing this issue on the latest version?
You can get the latest version from Download · Cursor