No notification that when you connect Cursor to SSH it installs its own server!

Describe the Bug

I don’t get any notiifcation that Cursor is going to install it’s own server when you connect to SSH. That it is going to install Node.JS and then serve it’s own development server. Shared hosting doesn’t allow the use of Node.JS on some packages. This uses Root. Also I consider this to be a massive security risk installing a server, with no permission on somebody’s development or production server. You give ZERO notification to the user that this will happen. No chance to turn it down and not connect via SSH. I was under the impression it was just “Connecting via SSH” not “Connecting via SSH and installing the cursor server with nodejs” Nothing about “This will require root and will install NodeJS and our Cursor Server JS code for you?” All it says it is connecting not connecting and installing. What about keeping that installed server updated? Seems like a security risk to me and got me in trouble with my hosting provider.

Steps to Reproduce

Connect to shared hosting via cursor ssh

Get email from my hosting provider warning me to not use root on shared hosting or my SSH access gets revoked.

Expected Behavior

Notifcation to user about what it is actually going to do.

Instructions how to stop cursor server on the server and how to remove it

Not just installing software on a computer you just connected to with no permission or asking the user at all!

Operating System

Windows 10/11

Current Cursor Version (Menu → About Cursor → Copy)

Version: 1.1.5 (user setup)
VSCode Version: 1.96.2
Commit: ef5eeb47a684b4c217dfaf0463aa7ea952f8ab90
Date: 2025-06-21T05:31:17.701Z
Electron: 34.5.1
Chromium: 132.0.6834.210
Node.js: 20.19.0
V8: 13.2.152.41-electron.0
OS: Windows_NT x64 10.0.26100

Does this stop you from using Cursor

No - Cursor works, but with this issue

fwiw, this is how vscode works…

although I guess some notification about what’s going to happen might be useful…

1 Like