Runs commands in Ask mode

Support Bug Reports
1

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

I was in Agent mode and wanted Cursor to run commands, which it did. But then I switched back to Ask mode and it responded to my messages by running commands I didn’t ask it to run (and it shouldn’t have been able to run in Ask mode).

Steps to Reproduce

Switch to Agent mode, ask to run commands, switch back to Ask mode

Expected Behavior

I was expecting in Ask mode the agent wouldn’t run things without my permission

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.2.44 (Universal)
VSCode Version: 1.105.1
Commit: 20adc1003928b0f1b99305dbaf845656ff81f5d0
Date: 2025-12-24T21:41:47.598Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Darwin arm64 24.6.0

For AI issues: which model did you use?

Sonnet 4.5

For AI issues: add Request ID with privacy disabled

I don’t quite know what reference ID to copy to show this, after stopping it the last message has this request id

8028c811-a467-4838-b36a-eac7e2e740cf

Does this stop you from using Cursor

No - Cursor works, but with this issue

2

Hey, thanks for the report.

This is a known issue. Ask mode shouldn’t run commands without permission, and the team is working on a fix.

To help us understand it better, could you share:

  • Which exact commands were run while in Ask mode?
  • A screenshot of what happened, if you can reproduce it?

I’ll pass this on to the team.

1 Like
3

Thanks for the response! I was running BigQuery command line queries, it would generate SQL and just pass it to the tool. I tested it myself that this works, switched to Agent mode so it can run the commands itself, but it immediately hit a permission error, so I switched back to Ask mode so I can run the commands myself, but it kept on generating and running commands on its own.

2 Likes