I see some random characters output from Cursor

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

Sometimes I keep seeing random output from Cursor, attaching the screenshot for the same. The code change in the files seem to be alright but the steps summary and all is just some random characters.

Steps to Reproduce

Just a normal prompt to add a feature or fix an issue in the code.

Expected Behavior

The output is all weird; it seems like something is corrupted.

Screenshots / Screen Recordings

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.1.50
VSCode Version: 1.105.1
Commit: 56f0a83df8e9eb48585fcc4858a9440db4cc7770
Date: 2025-12-06T23:39:52.834Z (4 days ago)
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Darwin arm64 24.6.0

For AI issues: which model did you use?

Sonnet 4.5

Does this stop you from using Cursor

No - Cursor works, but with this issue

Hey, thanks for the report, it looks like a failure in generating step descriptions.

We need details:

  • Where exactly the garbage text appears - Steps, Review, chat, or terminal
  • Minimal steps and example prompt
  • Request ID of 1-2 failed runs: chat menu in the top right → Copy Request ID
  • Logs from Help → Toggle Developer Tools → Console at the time of reproduction

Quick checks:

  • Switch the model to another one and repeat
  • Run without extensions: in the terminal, cursor --disable-extensions
  • Try in a new empty project

Send the Request ID - I’ll pass it to the engineers.

Thanks for your reply. It happens in the Chat I guess, right after the prompt in the chat it goes into thinking mode and it spits outs this garbage text.

Here is the Request ID - bee94b02-6e2c-4f71-8d95-0d496486409e.

It is a long conversation, it happened after a few interactions.

I have restarted and started fresh, so far I haven’t come across the problem again.

1 Like

@dnmahendra Be careful posting this on open forums. It would be quite simple for an attacker to inject a prompt into Sonnet (Cursor is attackable using 3rd-party VSCode plugins) that would encode some secrets you have on your machine and have Cursor dump them in the reasoning output. The attacker can then search open forums for specific patterns, find your post, then decode your secret on their side.

In other words, what looks like garbage text might contain some secrets from your machine (think API keys and crypto seed phrases).

@mojojojo Thanks for the reminder. I ensure Cursor has no access to any secrets at any time. That garbage is mostly what Cursor is trying to summarise the task. When I first saw these messages, even I was worried for a second that I got hacked or something seeing that output.

This topic was automatically closed 22 days after the last reply. New replies are no longer allowed.