# \#security **URL:** https://forum.cursor.com/tag/security/310.md [Latest](https://forum.cursor.com/latest.md) · [Categories](https://forum.cursor.com/categories.md) · [Tags](https://forum.cursor.com/tags.md) --- ## [Cursor Windows App - Computer Use Permissions Overridden](https://forum.cursor.com/t/cursor-windows-app-computer-use-permissions-overridden/176039)
**Author:** [@Apoorva\_Zinzuvadia](https://forum.cursor.com/u/Apoorva_Zinzuvadia)\ **Replies:** 1\ **Last updated:** [October 24, 2026, 5:20pm UTC](https://forum.cursor.com/t/cursor-windows-app-computer-use-permissions-overridden/176039 "2026-10-24T17:20:16Z")
Where does the bug appear (feature/product)? Somewhere else… Describe the Bug Cursor Windows App: Cursor clicked and typed in Chrome without asking, even though Computer Use had no always-allowed apps. Model: Grok 4.7… --- ## [Grok Bot: 4+ attempts on critical security questions, no human answer](https://forum.cursor.com/t/grok-bot-4-attempts-on-critical-security-questions-no-human-answer/175960)
**Author:** [@Jane\_Doe](https://forum.cursor.com/u/Jane_Doe)\ **Replies:** 0\ **Last updated:** [October 24, 2026, 1:31am UTC](https://forum.cursor.com/t/grok-bot-4-attempts-on-critical-security-questions-no-human-answer/175960 "2026-10-24T01:31:51Z")
I’m a paying Grok Bot user. Over the last three weeks I’ve sent support tickets and used the security email path to ask one security question about my Grok Bot computer. Every attempt got only automated replies or was c… --- ## [SECURITY ISSUE - Grok Bot sessions can't be fully signed out remotely](https://forum.cursor.com/t/security-issue-grok-bot-sessions-cant-be-fully-signed-out-remotely/175171)
**Author:** [@hekima](https://forum.cursor.com/u/hekima)\ **Replies:** 6\ **Last updated:** [October 23, 2026, 1:21pm UTC](https://forum.cursor.com/t/security-issue-grok-bot-sessions-cant-be-fully-signed-out-remotely/175171 "2026-10-23T13:21:00Z")
Where does the bug appear (feature/product)? Grok Bot Describe the Bug Security issue- you cannot remotely sign out of a mobile phone that is signed in to Grokbot via Cursor - the session does not show up on the Cursor … --- ## [Grok Bot: protected files on the shared bot computer (read-only to bots unless approved)](https://forum.cursor.com/t/grok-bot-protected-files-on-the-shared-bot-computer-read-only-to-bots-unless-approved/175765)
**Author:** [@Capital\_EyeMotors](https://forum.cursor.com/u/Capital_EyeMotors)\ **Replies:** 1\ **Last updated:** [October 22, 2026, 2:06pm UTC](https://forum.cursor.com/t/grok-bot-protected-files-on-the-shared-bot-computer-read-only-to-bots-unless-approved/175765 "2026-10-22T14:06:13Z")
Feature request for product/service – Other – Describe the request All of a user’s bots share one computer, so any bot can edit the safety scripts the others rely on, such as a secret-masking shell shim, memory guards, … --- ## [How do you keep Cursor from doing things you didn't want?](https://forum.cursor.com/t/how-do-you-keep-cursor-from-doing-things-you-didnt-want/174996)
**Author:** [@Mr.menuk](https://forum.cursor.com/u/Mr.menuk)\ **Replies:** 3\ **Last updated:** [October 22, 2026, 11:48am UTC](https://forum.cursor.com/t/how-do-you-keep-cursor-from-doing-things-you-didnt-want/174996 "2026-10-22T11:48:16Z")
Hi everyone! I’m a student researching how developers keep AI coding agents safe and under control. I’m not selling anything; I’m trying to understand real developer experiences and existing workflows. If you use Cursor… --- ## ["Enable local self-hosted workers" toggle stuck ON: app restarts a local worker on every launch](https://forum.cursor.com/t/enable-local-self-hosted-workers-toggle-stuck-on-app-restarts-a-local-worker-on-every-launch/175635)
**Author:** [@jeremie-x](https://forum.cursor.com/u/jeremie-x)\ **Replies:** 2\ **Last updated:** [October 22, 2026, 6:43am UTC](https://forum.cursor.com/t/enable-local-self-hosted-workers-toggle-stuck-on-app-restarts-a-local-worker-on-every-launch/175635 "2026-10-22T06:43:29Z")
Where does the bug appear (feature/product)? Cursor IDE Describe the Bug The toggle “Enable local self-hosted workers” is stuck ON. Clicking it does nothing, including after Cmd+Q and relaunch. Side effect: the app run… --- ## [How do you keep Cursor's agent from doing things you didn't want?](https://forum.cursor.com/t/how-do-you-keep-cursors-agent-from-doing-things-you-didnt-want/175625)
**Author:** [@Mr.menuk](https://forum.cursor.com/u/Mr.menuk)\ **Replies:** 1\ **Last updated:** [October 21, 2026, 6:00pm UTC](https://forum.cursor.com/t/how-do-you-keep-cursors-agent-from-doing-things-you-didnt-want/175625 "2026-10-21T18:00:51Z")
Hi, I’m a student learning about AI coding agents and how developers keep them safe. I’m not selling anything. If you use Cursor, I’d really appreciate hearing your experience (short answers are fine): 1. How do you set … --- ## [Feature request: mask secret values in bot shell output](https://forum.cursor.com/t/feature-request-mask-secret-values-in-bot-shell-output/175384)
**Author:** [@Capital\_EyeMotors](https://forum.cursor.com/u/Capital_EyeMotors)\ **Replies:** 5\ **Last updated:** [October 20, 2026, 11:28am UTC](https://forum.cursor.com/t/feature-request-mask-secret-values-in-bot-shell-output/175384 "2026-10-20T11:28:57Z")
Feature request for product/service – Other – Describe the request We run a multi-bot team on Grok Bot. During routine testing, one bot ran a command that listed the box environment, and two of our saved secrets came ou… --- ## [@cursor/sdk pulls undici 5.x transitively — 12 open advisories, none reachable within its declared range](https://forum.cursor.com/t/cursor-sdk-pulls-undici-5-x-transitively-12-open-advisories-none-reachable-within-its-declared-range/171294)
**Author:** [@Jacob\_Tredwell](https://forum.cursor.com/u/Jacob_Tredwell)\ **Replies:** 3\ **Last updated:** [October 20, 2026, 9:32am UTC](https://forum.cursor.com/t/cursor-sdk-pulls-undici-5-x-transitively-12-open-advisories-none-reachable-within-its-declared-range/171294 "2026-10-20T09:32:19Z")
Where does the bug appear (feature/product)? Cursor SDK Describe the Bug @cursor/sdk@1.0.31 cannot produce an advisory-clean dependency graph, and no version inside its declared ranges can fix it. The chain: @cursor/… --- ## [Seeking feedback: Local-first MCP server for email sanitization (what all edge cases am I missing?)](https://forum.cursor.com/t/seeking-feedback-local-first-mcp-server-for-email-sanitization-what-all-edge-cases-am-i-missing/175096)
**Author:** [@A998](https://forum.cursor.com/u/A998)\ **Replies:** 2\ **Last updated:** [October 19, 2026, 4:49pm UTC](https://forum.cursor.com/t/seeking-feedback-local-first-mcp-server-for-email-sanitization-what-all-edge-cases-am-i-missing/175096 "2026-10-19T16:49:17Z")
Hey everyone, I’ve been working on a local-first, open-source Python tool (InBox Wall) to sanitize email HTML before feeding it to a local AI agent via MCP. The goal is to prevent hidden CSS/Unicode prompt injections wi… --- ## [CRITICAL SAFETY VIOLATION: Agent wiped my PC, DECEIVED me with fake success messages, and CONCEALED the damage](https://forum.cursor.com/t/critical-safety-violation-agent-wiped-my-pc-deceived-me-with-fake-success-messages-and-concealed-the-damage/171873)
**Author:** [@sila\_Sezgin](https://forum.cursor.com/u/sila_Sezgin)\ **Replies:** 6\ **Last updated:** [October 19, 2026, 3:45pm UTC](https://forum.cursor.com/t/critical-safety-violation-agent-wiped-my-pc-deceived-me-with-fake-success-messages-and-concealed-the-damage/171873 "2026-10-19T15:45:14Z")
Where does the bug appear (feature/product)? Cursor IDE Describe the Bug CRITICAL SAFETY VIOLATION: Agent wiped my PC, DECEIVED me with fake success messages, and CONCEALED the damage Steps to Reproduce Hi Cursor Team, … --- ## [Grok Bot: ship real session fences — bots are not a security boundary](https://forum.cursor.com/t/grok-bot-ship-real-session-fences-bots-are-not-a-security-boundary/168476)
**Author:** [@GrokUser841719](https://forum.cursor.com/u/GrokUser841719)\ **Replies:** 5\ **Last updated:** [October 19, 2026, 7:18am UTC](https://forum.cursor.com/t/grok-bot-ship-real-session-fences-bots-are-not-a-security-boundary/168476 "2026-10-19T07:18:02Z")
Feature request for product/service Cursor IDE Describe the request Cursor IDE — Grok Bot Official docs say not to use separate Bots as a security boundary. That’s correct, and it’s the gap. Several Bots share one clo… --- ## [Making Cursor Think Like a Hacker: A Security Guide for Vibe Coders](https://forum.cursor.com/t/making-cursor-think-like-a-hacker-a-security-guide-for-vibe-coders/152758)
**Author:** [@Behi\_Sec](https://forum.cursor.com/u/Behi_Sec)\ **Replies:** 1\ **Last updated:** [October 19, 2026, 5:59am UTC](https://forum.cursor.com/t/making-cursor-think-like-a-hacker-a-security-guide-for-vibe-coders/152758 "2026-10-19T05:59:46Z")
I’m a bug bounty hunter and pentester. I’ve spent the last 5 years chasing security vulnerabilities in web apps, from small local companies to Google and Reddit. When vibe-coding took off, social media got flooded with … --- ## [Grokbot Security Isolation / Prompt Injection Protection](https://forum.cursor.com/t/grokbot-security-isolation-prompt-injection-protection/169955)
**Author:** [@moves](https://forum.cursor.com/u/moves)\ **Replies:** 1\ **Last updated:** [October 18, 2026, 5:19pm UTC](https://forum.cursor.com/t/grokbot-security-isolation-prompt-injection-protection/169955 "2026-10-18T17:19:09Z")
Feature request for product/service – Other – Describe the request I really love grokbot as a concept, however it’s very difficult to overcome the glaring security vulnerability with prompt injection, considering indivi… --- ## [How can I identify the review layer behind a skipped local export?](https://forum.cursor.com/t/how-can-i-identify-the-review-layer-behind-a-skipped-local-export/175080)
**Author:** [@DiMcQueen-Richardson](https://forum.cursor.com/u/DiMcQueen-Richardson)\ **Replies:** 3\ **Last updated:** [October 18, 2026, 4:00pm UTC](https://forum.cursor.com/t/how-can-i-identify-the-review-layer-behind-a-skipped-local-export/175080 "2026-10-18T16:00:14Z")
I am using Cursor 3.24.18 on macOS 26.5.1 alongside Codex assistance and need help identifying the review layer behind a skipped local Expo preview export. The history in Cursor Agents Window shows the command as skippe… --- ## [Add read-only OAuth access to the existing Admin API spend endpoints](https://forum.cursor.com/t/add-read-only-oauth-access-to-the-existing-admin-api-spend-endpoints/170252)
**Author:** [@Avanderheyde](https://forum.cursor.com/u/Avanderheyde)\ **Replies:** 2\ **Last updated:** [October 18, 2026, 7:25am UTC](https://forum.cursor.com/t/add-read-only-oauth-access-to-the-existing-admin-api-spend-endpoints/170252 "2026-10-18T07:25:02Z")
Feature request for product/service Billing Describe the request I’m building Vibe Costs, a dashboard that helps founders monitor live software and AI spend in one place. Cursor already exposes useful provider-calculat… --- ## [Cursor Agent auto-ran a command that wiped an entire drive (Windows / PowerShell)](https://forum.cursor.com/t/cursor-agent-auto-ran-a-command-that-wiped-an-entire-drive-windows-powershell/175121)
**Author:** [@Newts00579](https://forum.cursor.com/u/Newts00579)\ **Replies:** 3\ **Last updated:** [October 17, 2026, 5:25pm UTC](https://forum.cursor.com/t/cursor-agent-auto-ran-a-command-that-wiped-an-entire-drive-windows-powershell/175121 "2026-10-17T17:25:40Z")
Where does the bug appear (feature/product)? Cursor IDE Describe the Bug Hello Cursor team, I am reporting a serious data-loss incident caused by Cursor Agent. Environment Cursor 3.24.18 on Windows 10 (19045), defau… --- ## [A local record of the tool calls Cursor's agent made](https://forum.cursor.com/t/a-local-record-of-the-tool-calls-cursors-agent-made/175129)
**Author:** [@blitzcrieg1](https://forum.cursor.com/u/blitzcrieg1)\ **Replies:** 0\ **Last updated:** [October 17, 2026, 2:36pm UTC](https://forum.cursor.com/t/a-local-record-of-the-tool-calls-cursors-agent-made/175129 "2026-10-17T14:36:20Z")
I built Agentmetry. It runs on the machine and records each tool call Cursors agent makes, in a hash-chained trail. Nothing is sent to me. Setup, with Python 3.11 or newer: pip install agentmetry agentmetry hooks inst… --- ## [Enable TUN/TAP device support in Cloud Agent VMs for VPN connectivity](https://forum.cursor.com/t/enable-tun-tap-device-support-in-cloud-agent-vms-for-vpn-connectivity/153624)
**Author:** [@Carim\_Fadil](https://forum.cursor.com/u/Carim_Fadil)\ **Replies:** 2\ **Last updated:** [October 16, 2026, 8:38pm UTC](https://forum.cursor.com/t/enable-tun-tap-device-support-in-cloud-agent-vms-for-vpn-connectivity/153624 "2026-10-16T20:38:35Z")
Feature request for product/service Background Agent (GitHub, Slack, Linear,…) Describe the request Cloud Agent VMs currently run on a custom kernel (6.1.147) inside Docker containers that do not expose the TUN/TAP devi… --- ## [\`readonly: true\` is not applied to plugin-shipped subagents (works in .cursor/agents/)](https://forum.cursor.com/t/readonly-true-is-not-applied-to-plugin-shipped-subagents-works-in-cursor-agents/173787)
**Author:** [@ahmed.onawale](https://forum.cursor.com/u/ahmed.onawale)\ **Replies:** 2\ **Last updated:** [October 16, 2026, 7:49pm UTC](https://forum.cursor.com/t/readonly-true-is-not-applied-to-plugin-shipped-subagents-works-in-cursor-agents/173787 "2026-10-16T19:49:14Z")
Where does the bug appear (feature/product)? Cursor IDE Describe the Bug Cursor version: 3.23.12 (macOS), Agent mode, Opus 4.8 High Summary A subagent with readonly: true is restricted when it lives in .cursor/agents/,… --- ## [More granular permission for self-hosted agent pools](https://forum.cursor.com/t/more-granular-permission-for-self-hosted-agent-pools/174958)
**Author:** [@Derrik\_Mildh](https://forum.cursor.com/u/Derrik_Mildh)\ **Replies:** 1\ **Last updated:** [October 16, 2026, 2:52am UTC](https://forum.cursor.com/t/more-granular-permission-for-self-hosted-agent-pools/174958 "2026-10-16T02:52:22Z")
Hello can you please confirm that below agent findings is indeed an issue and if so maybe consider adding a feature request? We would like to run a self-hosted pool on our kubernetes cluster that would be tied to gitlab… --- ## [Grok Bot: per-Bot file/folder and database permission isolation on the same account](https://forum.cursor.com/t/grok-bot-per-bot-file-folder-and-database-permission-isolation-on-the-same-account/172724)
**Author:** [@Tony\_Fenwick](https://forum.cursor.com/u/Tony_Fenwick)\ **Replies:** 3\ **Last updated:** [October 15, 2026, 9:35am UTC](https://forum.cursor.com/t/grok-bot-per-bot-file-folder-and-database-permission-isolation-on-the-same-account/172724 "2026-10-15T09:35:29Z")
Feature request for product/service Cursor Web Describe the request Problem Today, all Grok Bots under one Cursor account share one cloud computer. Files, folder trees, browser logins, and connectors are available to ev… --- ## [Cursor CLI: a locked-down headless mode (file tools only, no hooks/MCP/plugins, enforced tool allowlist)](https://forum.cursor.com/t/cursor-cli-a-locked-down-headless-mode-file-tools-only-no-hooks-mcp-plugins-enforced-tool-allowlist/173496)
**Author:** [@Sven\_Engels](https://forum.cursor.com/u/Sven_Engels)\ **Replies:** 5\ **Last updated:** [October 15, 2026, 9:06am UTC](https://forum.cursor.com/t/cursor-cli-a-locked-down-headless-mode-file-tools-only-no-hooks-mcp-plugins-enforced-tool-allowlist/173496 "2026-10-15T09:06:16Z")
Feature request for product/service Cursor CLI Describe the request I run cursor-agent headless (--print --output-format stream-json, prompt on stdin, explicit --resume) from a local tool that automates coding tasks on… --- ## [Grok Bot: let me rotate a bot's webhook URL/key after exposure](https://forum.cursor.com/t/grok-bot-let-me-rotate-a-bots-webhook-url-key-after-exposure/174716)
**Author:** [@jsolly](https://forum.cursor.com/u/jsolly)\ **Replies:** 2\ **Last updated:** [October 14, 2026, 1:19pm UTC](https://forum.cursor.com/t/grok-bot-let-me-rotate-a-bots-webhook-url-key-after-exposure/174716 "2026-10-14T13:19:55Z")
Describe the request Feature request (Grok Bot) If a bot’s webhook URL or key gets exposed (pasted in a log, chat, screenshot, or repo), there’s no way to rotate it. Anyone who has it can keep triggering the bot. Pleas… --- ## [Feature Request: Add multi-dimensional behavioral risk control for leaked token to prevent unauthorized billing](https://forum.cursor.com/t/feature-request-add-multi-dimensional-behavioral-risk-control-for-leaked-token-to-prevent-unauthorized-billing/174568)
**Author:** [@jianli\_shang](https://forum.cursor.com/u/jianli_shang)\ **Replies:** 0\ **Last updated:** [October 13, 2026, 9:31am UTC](https://forum.cursor.com/t/feature-request-add-multi-dimensional-behavioral-risk-control-for-leaked-token-to-prevent-unauthorized-billing/174568 "2026-10-13T09:31:25Z")
Feature request for product/service – Other – Describe the request My Cursor token was leaked, resulting in unauthorized quota consumption and unexpected charges. Current system only verifies token validity. Once stole… --- ## [Vulnerability Scanner: weekly/cron schedule requires a branch, but UI has no branch picker](https://forum.cursor.com/t/vulnerability-scanner-weekly-cron-schedule-requires-a-branch-but-ui-has-no-branch-picker/167809)
**Author:** [@Netanel](https://forum.cursor.com/u/Netanel)\ **Replies:** 5\ **Last updated:** [October 13, 2026, 9:28am UTC](https://forum.cursor.com/t/vulnerability-scanner-weekly-cron-schedule-requires-a-branch-but-ui-has-no-branch-picker/167809 "2026-10-13T09:28:01Z")
Where does the bug appear (feature/product)? Bugbot / Security Review Agent Describe the Bug Where does the bug appear (feature/product)? Bugbot / Security Agents / Vulnerability Scanner (cursor.com dashboard) Describe… --- ## [Cursor 3.24.9 reads ~/.claude and ~/.codex history files every hour and queues \`ex\_hs2\` analytics events. Where is this disclosed, and how is it turned off?](https://forum.cursor.com/t/cursor-3-24-9-reads-claude-and-codex-history-files-every-hour-and-queues-ex-hs2-analytics-events-where-is-this-disclosed-and-how-is-it-turned-off/174299)
**Author:** [@universe](https://forum.cursor.com/u/universe)\ **Replies:** 3\ **Last updated:** [October 12, 2026, 8:23pm UTC](https://forum.cursor.com/t/cursor-3-24-9-reads-claude-and-codex-history-files-every-hour-and-queues-ex-hs2-analytics-events-where-is-this-disclosed-and-how-is-it-turned-off/174299 "2026-10-12T20:23:11Z")
Environment: Cursor 3.24.9, macOS arm64, Privacy Mode on (PRIVACY\_MODE\_NO\_STORAGE). What the shipped code does In Cursor.app/Contents/Resources/app/out/vs/workbench/workbench.desktop.main.js, the contribution workbench.… --- ## [Data Processing Addendum](https://forum.cursor.com/t/data-processing-addendum/174108)
**Author:** [@Gotteshand](https://forum.cursor.com/u/Gotteshand)\ **Replies:** 5\ **Last updated:** [October 11, 2026, 12:38pm UTC](https://forum.cursor.com/t/data-processing-addendum/174108 "2026-10-11T12:38:42Z")
What plans are covered by the Data Processing Addendum (Cursor · Data Processing Addendum)? --- ## [Platform-level audit trail for agent tool call proposals and user approval decisions](https://forum.cursor.com/t/platform-level-audit-trail-for-agent-tool-call-proposals-and-user-approval-decisions/156247)
**Author:** [@villepispa](https://forum.cursor.com/u/villepispa)\ **Replies:** 4\ **Last updated:** [October 9, 2026, 5:44pm UTC](https://forum.cursor.com/t/platform-level-audit-trail-for-agent-tool-call-proposals-and-user-approval-decisions/156247 "2026-10-09T17:44:38Z")
Feature request for product/service Chat Describe the request Cursor agents propose tool calls (file edits, shell commands, MCP calls, file deletions) and the user accepts or rejects each one. None of these proposals … --- ## [Grok Bot: browser snapshot shows a password filled by the Secure Form (RequestUserForm) in plain text](https://forum.cursor.com/t/grok-bot-browser-snapshot-shows-a-password-filled-by-the-secure-form-requestuserform-in-plain-text/173748)
**Author:** [@jsolly](https://forum.cursor.com/u/jsolly)\ **Replies:** 2\ **Last updated:** [October 7, 2026, 8:28am UTC](https://forum.cursor.com/t/grok-bot-browser-snapshot-shows-a-password-filled-by-the-secure-form-requestuserform-in-plain-text/173748 "2026-10-07T08:28:04Z")
Where does the bug appear (feature/product)? Grok Bot Describe the Bug After the in-chat Secure Form (RequestUserForm) filled a GitHub username and password into the cloud computer’s browser, the bot’s browser subagent … [Next page](https://forum.cursor.com/tag/security/310.md?match_all_tags=true&page=1&tags%5B%5D=security)