|
Agent shell injects `npm_config_devdir`, causing npm 11 warning on macOS
|
|
2
|
25
|
September 7, 2026
|
|
[3.19.7 regression] Windows stdio MCP fails: sandbox unsupported_platform
|
|
1
|
44
|
September 7, 2026
|
|
Cursor agents should be restricted from access of files outside the project without permission
|
|
6
|
1060
|
August 6, 2026
|
|
Shell `working_directory` parameter doesn't affect things inside the sandbox
|
|
1
|
22
|
August 31, 2026
|
|
Linux Sandbox: Missing additional read/write paths kill sandbox
|
|
2
|
34
|
August 28, 2026
|
|
Cursor Remote SSH crashes on Ubuntu 22.04 VMware VM while VS Code Remote SSH works
|
|
3
|
110
|
August 27, 2026
|
|
Agent-shell sandbox DNS resolution broken
|
|
12
|
234
|
August 27, 2026
|
|
Configurable read-only shell access in Ask Mode
|
|
0
|
22
|
August 24, 2026
|
|
Cursor fills /tmp with ~2.9 GB cursor-sandbox-cache, causing shell “Disk quota exceeded” errors
|
|
4
|
125
|
August 21, 2026
|
|
Linux: Agent Shell commands hang indefinitely
|
|
3
|
55
|
August 19, 2026
|
|
Agent shell injects BUNDLE_PATH even with required_permissions ["all"] - breaks Ruby/Bundler
|
|
1
|
43
|
August 19, 2026
|
|
Grok Bot computer cannot finish a normal workflow - details
|
|
1
|
119
|
August 18, 2026
|
|
Orphaned agent-exec gh shell storm maxes CPU after Plan Mode (multi-root)
|
|
11
|
193
|
August 18, 2026
|
|
Sandboxed `pnpm install` creates noisy `.pnpm-store/` inside project
|
|
1
|
62
|
August 14, 2026
|
|
Cursor-agent (sandboxed): worker.sock ignores CURSOR_DATA_DIR and is created at literal /tmp/.cursor/<workspace-key>/
|
|
1
|
42
|
August 14, 2026
|
|
Treat NTFS junctions / symlink targets as in-workspace, or let additionalReadwritePaths apply to the Write tool
|
|
0
|
38
|
August 14, 2026
|
|
Linux terminal sandbox always fails preflight on RHEL 9 / Rocky 9: bubblewrap cannot bind-mount onto the symlinked CA bundle
|
|
4
|
177
|
August 11, 2026
|
|
Soft soft soft loop freeze
|
|
1
|
40
|
August 10, 2026
|
|
Critical: Terminal Sandbox fails on OrbStack VMs, breaking Agent and Remote SSH workflow
|
|
11
|
169
|
August 8, 2026
|
|
Agent sandbox redirects PLAYWRIGHT_BROWSERS_PATH and npm_config_devdir to empty cursor-sandbox-cache (Windows) — Playwright reinstall loops + npm 11 warnings
|
|
1
|
74
|
August 6, 2026
|
|
Sandboxed shell commands return no exit status
|
|
1
|
32
|
August 5, 2026
|
|
Terminal sandbox is incorrectly reported as unsupported on OrbStack Linux kernel 7.0.x (AppArmor suggestion is misleading)
|
|
3
|
67
|
August 5, 2026
|
|
Serious Boundary Issue bypass
|
|
8
|
135
|
August 5, 2026
|
|
Agent sandbox sets system proxy to 127.0.0.1:57126 and breaks all other apps
|
|
1
|
55
|
August 4, 2026
|
|
Agent Write permission denied on .cs files + NTFS Length +1024
|
|
1
|
40
|
August 3, 2026
|
|
Git Graph + Agent: multi-root workspace uses first folder only
|
|
5
|
132
|
July 30, 2026
|
|
Agent Shell hangs/crashes on NFS workspaces due to hardcoded sandbox glob patterns
|
|
1
|
61
|
July 23, 2026
|
|
Rg/grep issue in sandbox
|
|
3
|
117
|
July 22, 2026
|
|
Shell/terminal sandbox fails to start on WSL2 — Failed to mount ".git/hooks" read-only: No such file or directory
|
|
3
|
84
|
July 21, 2026
|
|
Sandbox processes persist after Cursor exit and cannot be killed by user
|
|
9
|
361
|
July 20, 2026
|