# The agent in user mode edits files without accessing them **URL:** \ **Category:** Bug Reports\ **Created:** [November 6, 2025, 3:53pm UTC](https://forum.cursor.com/t/the-agent-in-user-mode-edits-files-without-accessing-them/141427 "2025-11-06T15:53:15Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Michael\_Kolinski](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/michael_kolinski/32/86210_2.png) [@Michael\_Kolinski](https://forum.cursor.com/u/Michael_Kolinski)\ **Post date:** [November 6, 2025, 3:53pm UTC](https://forum.cursor.com/t/the-agent-in-user-mode-edits-files-without-accessing-them/141427/1 "2025-11-06T15:53:15Z")
### Where does the bug appear (feature/product)? Cursor IDE ### Describe the Bug Cursor IDE automatically creates or edits files when the AI assistant uses markdown code blocks with file path syntax (```dart:path/to/file.dart), even though the AI has no access to file editing tools. This bypasses the intended restriction that prevents the AI from modifying files without explicit user confirmation. Impact: Files are modified without user consent, potentially causing unintended changes to the codebase. ### Steps to Reproduce 1. Ask the AI assistant to show code for a specific file path 2. The AI responds with a markdown code block using the syntax: ```dart:lib/path/to/file.dart 3. Cursor automatically creates/edits the file at that path 4. The file appears in the editor with the provided code Example prompt: “Show me code for filename.dart” ### Expected Behavior The AI should only display code suggestions without automatically creating/editing files File creation/editing should require explicit user action or confirmation Markdown code blocks with file paths should be treated as documentation, not commands If automatic file creation is intended, it should be a user-configurable feature with clear warnings ### Screenshots / Screen Recordings ![photo_2025-11-06_19-52-44.jpg](https://us1.discourse-cdn.com/cursor1/original/3X/a/c/ac7c08eadc2147ef12924f1d536c47d75ff352aa.jpeg) ### Operating System MacOS ### Current Cursor Version (Menu → About Cursor → Copy) Version: 2.0.64 (Universal) VSCode Version: 1.99.3 Commit: 25412918da7e74b2686b25d62da1f01cfcd27680 Date: 2025-11-06T04:35:14.424Z Electron: 37.7.0 Chromium: 138.0.7204.251 Node.js: 22.20.0 V8: 13.8.258.32-electron.0 OS: Darwin arm64 25.0.0 ### For AI issues: which model did you use? Any models ### For AI issues: add Request ID with privacy disabled 07379157-3ff7-45ee-97ee-c1865d182346 2517f66e-227d-49e7-85cf-3f9073c0371b 09e72604-36a9-48cb-818f-440c5b959a2f ### Additional Information AI Tool Access: The AI assistant does not have access to file editing tools (no write\_file, edit\_file, etc. in available tools) Trigger: The markdown syntax `language:path/to/file appears to be interpreted as a file creation/editing command Affected Files: Multiple files were created in Filepath directory Workaround: Use plain markdown code blocks without file paths (`dart instead of ```dart:path) Severity: High (security/access control issue) ### Does this stop you from using Cursor Yes - Cursor is unusable ---
**Author:** ![sanjeed5](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/sanjeed5/32/9610_2.png) [@sanjeed5](https://forum.cursor.com/u/sanjeed5)\ **Post date:** [November 7, 2025, 12:34pm UTC](https://forum.cursor.com/t/the-agent-in-user-mode-edits-files-without-accessing-them/141427/2 "2025-11-07T12:34:16Z")
Thanks for the report. Does this happen on Ask Mode too for you? ---
**Author:** ![Michael\_Kolinski](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/michael_kolinski/32/86210_2.png) [@Michael\_Kolinski](https://forum.cursor.com/u/Michael_Kolinski)\ **Post date:** [November 8, 2025, 1:50pm UTC](https://forum.cursor.com/t/the-agent-in-user-mode-edits-files-without-accessing-them/141427/3 "2025-11-08T13:50:20Z")
The screenshot shows that this happened in custom agent mode with disabled access to editing and deleting files. Check out the starter topic post ---
**Author:** ![deanrie](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/deanrie/32/1263_2.png) [@deanrie](https://forum.cursor.com/u/deanrie)\ **Post date:** [November 8, 2025, 5:42pm UTC](https://forum.cursor.com/t/the-agent-in-user-mode-edits-files-without-accessing-them/141427/4 "2025-11-08T17:42:11Z")
Hey, thanks for the report. I can repro it. I’ll pass it to the team. ---
**Author:** ![Michael\_Kolinski](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/michael_kolinski/32/86210_2.png) [@Michael\_Kolinski](https://forum.cursor.com/u/Michael_Kolinski)\ **Post date:** [November 8, 2025, 8:02pm UTC](https://forum.cursor.com/t/the-agent-in-user-mode-edits-files-without-accessing-them/141427/6 "2025-11-08T20:02:13Z")
Deanrie, thank u so much. And I have another really interesting problem. Almost the same. [https://forum.cursor.com/t/after-the-chat-summary-the-model-starts-performing-a-non-existent-task/141392](https://forum.cursor.com/t/after-the-chat-summary-the-model-starts-performing-a-non-existent-task/141392) ---
**Author:** ![system](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/system/32/99069_2.png) [@system](https://forum.cursor.com/u/system)\ **Post date:** [November 30, 2025, 8:02pm UTC](https://forum.cursor.com/t/the-agent-in-user-mode-edits-files-without-accessing-them/141427/7 "2025-11-30T20:02:29Z")
Closed on November 30, 2025, 8:02pm UTC This topic was automatically closed 22 days after the last reply. New replies are no longer allowed.