Password reset redirects to localhost

Where does the bug appear (feature/product)?

Somewhere else…

Describe the Bug

Password reset redirects to localhost.
I successfully reset my Cursor password on
https://authenticator.cursor.sh/reset-password?token=xxx&client_id=client_xxx
but got redirected to
http://127.0.0.1:4003/api/auth/callback?code=xxx

Steps to Reproduce

Login but request reset password. Follow link en email, type and retype a new password. Click reset password.

Expected Behavior

Being redirected to some success page on cursor website

Screenshots / Screen Recordings

Operating System

Windows 10/11

Version Information

website on sept 2 2026

Does this stop you from using Cursor

No - Cursor works, but with this issue

Hey, thanks for the report and for the screenshot showing the redirect to localhost, that helps.

Good news: the password reset itself worked fine, and our logs show you’ve already been able to sign in with the new password, so your account is all good. The page you got sent to after the reset, that 127.0.0.1 address, is just a wrong redirect target and it doesn’t do anything to your account.

That shouldn’t happen and it’s not something on your side. I’ve passed this to the team so after a reset it redirects to a proper confirmation page. If you notice anything else weird when signing in, let me know.