This has only just started happening to day, but this subagent has asked me about 8 times for permission so far…
It’s never asked like this before and is formatted differently to other permission requests where it showed you the command.
Also, when it searches through a codebase it has never asked to do that before.
Hi there!
We detected that this may be a bug report, so we’ve moved your post to the Bug Reports category.
To help us investigate and fix this faster, could you edit your original post to include the details from the template below?
Where does the bug appear (feature/product)?
Describe the Bug
A clear and concise description of what the bug is.
Steps to Reproduce
How can you reproduce this bug? We have a much better chance at fixing issues if we can reproduce them!
Expected Behavior
What is meant to happen here that isn’t working correctly?
Screenshots / Screen Recordings
If applicable, attach images or videos (.jpg, .png, .gif, .mp4, .mov)
Operating System
Version Information
agent about in your terminalIDE:
Version: 2.xx.x
VSCode Version: 1.105.1
Commit: ......
CLI:
CLI Version 2026.01.17-d239e66
For AI issues: which model did you use?
Model name (e.g., Sonnet 4, Tab…)
For AI issues: add Request ID with privacy disabled
Request ID: f9a7046a-279b-47e5-ab48-6e8dc12daba1
For Background Agent issues, also post the ID: bc-…
Additional Information
Add any other context about the problem here.
Does this stop you from using Cursor?
The more details you provide, the easier it is for us to reproduce and fix the issue. Thanks!
Hey @Ryan_9, thanks for the report, and sorry about the prompt spam.
This is a known issue we’re already tracking, and I’ve added your report to it. When Auto-Review is your run mode, a subagent (like the Explorer one in your screenshot) isn’t currently getting the same auto-approval treatment as the main chat, so each command it runs that isn’t on your allowlist stops and asks. That’s also why the prompt looks different: on the subagent card we summarize the command by the programs it calls (cd, rg, Get-ChildItem, …) instead of showing the full command line. You can expand the subagent to see the exact command before allowing it.
The fix is already in the next release, so this should go away once you update to 3.21 (due out soon)
Thanks @Ryan_9, and sorry you’re having to deal with this! I am sharing details or your agent requests with the team so we can dig in and figure this out.
I’ve also been experiencing this the past couple days. I’m having to babysit Grok like never before, it’s slowing me down quite a bit
2 updates later and I’m still an overpaid babysitter. Is there any news on subagent behaviour?
Hey all,
We’re pretty sure we know what the issue is and we’re working on a fix. Sorry for the wait here.
Hi all! Can you all try to upgrade to 3.22.12 and letting us know if you’re still running into this issue? Apologies for the delay on getting this fix out!
I’ve only had a single sub agent so far but that looked good.
