|
Cursor Windows App - Computer Use Permissions Overridden
|
|
3
|
45
|
October 25, 2026
|
|
CRITICAL SAFETY VIOLATION: Agent wiped my PC, DECEIVED me with fake success messages, and CONCEALED the damage
|
|
7
|
179
|
October 25, 2026
|
|
Models ridiculously guardrailed post update
|
|
0
|
19
|
October 25, 2026
|
|
Grok Bot: no way to delete saved box secrets, and removing one from box-secrets.json leaves it in the Shell env
|
|
0
|
24
|
October 25, 2026
|
|
Letting an agent manage a Facebook Page without letting it go rogue
|
|
0
|
21
|
October 24, 2026
|
|
Grok Bot: 4+ attempts on critical security questions, no human answer
|
|
0
|
20
|
October 24, 2026
|
|
SECURITY ISSUE - Grok Bot sessions can't be fully signed out remotely
|
|
6
|
165
|
October 23, 2026
|
|
Grok Bot: protected files on the shared bot computer (read-only to bots unless approved)
|
|
1
|
25
|
October 22, 2026
|
|
How do you keep Cursor from doing things you didn't want?
|
|
3
|
96
|
October 22, 2026
|
|
"Enable local self-hosted workers" toggle stuck ON: app restarts a local worker on every launch
|
|
2
|
56
|
October 22, 2026
|
|
How do you keep Cursor's agent from doing things you didn't want?
|
|
1
|
29
|
October 21, 2026
|
|
Feature request: mask secret values in bot shell output
|
|
5
|
69
|
October 20, 2026
|
|
@cursor/sdk pulls undici 5.x transitively — 12 open advisories, none reachable within its declared range
|
|
3
|
56
|
October 20, 2026
|
|
Seeking feedback: Local-first MCP server for email sanitization (what all edge cases am I missing?)
|
|
2
|
46
|
October 19, 2026
|
|
Grok Bot: ship real session fences — bots are not a security boundary
|
|
5
|
266
|
October 19, 2026
|
|
Making Cursor Think Like a Hacker: A Security Guide for Vibe Coders
|
|
1
|
737
|
October 19, 2026
|
|
Grokbot Security Isolation / Prompt Injection Protection
|
|
1
|
226
|
October 18, 2026
|
|
How can I identify the review layer behind a skipped local export?
|
|
3
|
44
|
October 18, 2026
|
|
Add read-only OAuth access to the existing Admin API spend endpoints
|
|
2
|
62
|
October 18, 2026
|
|
Cursor Agent auto-ran a command that wiped an entire drive (Windows / PowerShell)
|
|
3
|
75
|
October 17, 2026
|
|
A local record of the tool calls Cursor's agent made
|
|
0
|
25
|
October 17, 2026
|
|
Enable TUN/TAP device support in Cloud Agent VMs for VPN connectivity
|
|
2
|
245
|
October 16, 2026
|
|
`readonly: true` is not applied to plugin-shipped subagents (works in .cursor/agents/)
|
|
2
|
50
|
October 16, 2026
|
|
More granular permission for self-hosted agent pools
|
|
1
|
38
|
October 16, 2026
|
|
Grok Bot: per-Bot file/folder and database permission isolation on the same account
|
|
3
|
132
|
October 15, 2026
|
|
Cursor CLI: a locked-down headless mode (file tools only, no hooks/MCP/plugins, enforced tool allowlist)
|
|
5
|
153
|
October 15, 2026
|
|
Grok Bot: let me rotate a bot's webhook URL/key after exposure
|
|
2
|
71
|
October 14, 2026
|
|
Feature Request: Add multi-dimensional behavioral risk control for leaked token to prevent unauthorized billing
|
|
0
|
22
|
October 13, 2026
|
|
Vulnerability Scanner: weekly/cron schedule requires a branch, but UI has no branch picker
|
|
5
|
112
|
October 13, 2026
|
|
Cursor 3.24.9 reads ~/.claude and ~/.codex history files every hour and queues `ex_hs2` analytics events. Where is this disclosed, and how is it turned off?
|
|
3
|
133
|
October 12, 2026
|