|
Grok Bot: 4+ attempts on critical security questions, no human answer
|
|
0
|
9
|
October 24, 2026
|
|
SECURITY ISSUE - Grok Bot sessions can't be fully signed out remotely
|
|
6
|
154
|
October 23, 2026
|
|
Grok Bot: protected files on the shared bot computer (read-only to bots unless approved)
|
|
1
|
22
|
October 22, 2026
|
|
How do you keep Cursor from doing things you didn't want?
|
|
3
|
96
|
October 22, 2026
|
|
"Enable local self-hosted workers" toggle stuck ON: app restarts a local worker on every launch
|
|
2
|
53
|
October 22, 2026
|
|
How do you keep Cursor's agent from doing things you didn't want?
|
|
1
|
28
|
October 21, 2026
|
|
Feature request: mask secret values in bot shell output
|
|
5
|
65
|
October 20, 2026
|
|
@cursor/sdk pulls undici 5.x transitively — 12 open advisories, none reachable within its declared range
|
|
3
|
56
|
October 20, 2026
|
|
Seeking feedback: Local-first MCP server for email sanitization (what all edge cases am I missing?)
|
|
2
|
46
|
October 19, 2026
|
|
CRITICAL SAFETY VIOLATION: Agent wiped my PC, DECEIVED me with fake success messages, and CONCEALED the damage
|
|
6
|
167
|
October 19, 2026
|
|
Grok Bot: ship real session fences — bots are not a security boundary
|
|
5
|
262
|
October 19, 2026
|
|
Making Cursor Think Like a Hacker: A Security Guide for Vibe Coders
|
|
1
|
728
|
October 19, 2026
|
|
Grokbot Security Isolation / Prompt Injection Protection
|
|
1
|
223
|
October 18, 2026
|
|
How can I identify the review layer behind a skipped local export?
|
|
3
|
44
|
October 18, 2026
|
|
Add read-only OAuth access to the existing Admin API spend endpoints
|
|
2
|
61
|
October 18, 2026
|
|
Cursor Agent auto-ran a command that wiped an entire drive (Windows / PowerShell)
|
|
3
|
73
|
October 17, 2026
|
|
A local record of the tool calls Cursor's agent made
|
|
0
|
25
|
October 17, 2026
|
|
Enable TUN/TAP device support in Cloud Agent VMs for VPN connectivity
|
|
2
|
244
|
October 16, 2026
|
|
`readonly: true` is not applied to plugin-shipped subagents (works in .cursor/agents/)
|
|
2
|
50
|
October 16, 2026
|
|
More granular permission for self-hosted agent pools
|
|
1
|
37
|
October 16, 2026
|
|
Grok Bot: per-Bot file/folder and database permission isolation on the same account
|
|
3
|
129
|
October 15, 2026
|
|
Cursor CLI: a locked-down headless mode (file tools only, no hooks/MCP/plugins, enforced tool allowlist)
|
|
5
|
152
|
October 15, 2026
|
|
Grok Bot: let me rotate a bot's webhook URL/key after exposure
|
|
2
|
71
|
October 14, 2026
|
|
Feature Request: Add multi-dimensional behavioral risk control for leaked token to prevent unauthorized billing
|
|
0
|
22
|
October 13, 2026
|
|
Vulnerability Scanner: weekly/cron schedule requires a branch, but UI has no branch picker
|
|
5
|
112
|
October 13, 2026
|
|
Cursor 3.24.9 reads ~/.claude and ~/.codex history files every hour and queues `ex_hs2` analytics events. Where is this disclosed, and how is it turned off?
|
|
3
|
132
|
October 12, 2026
|
|
Data Processing Addendum
|
|
5
|
87
|
October 11, 2026
|
|
Platform-level audit trail for agent tool call proposals and user approval decisions
|
|
4
|
258
|
October 9, 2026
|
|
Grok Bot: browser snapshot shows a password filled by the Secure Form (RequestUserForm) in plain text
|
|
2
|
106
|
October 7, 2026
|
|
Cursor now scans my entire hard drive (MacOS)
|
|
4
|
421
|
August 21, 2026
|