Cursor AI support agent invents user policy, causing user revolt
Date: 2025-04
Affected: Cursor (Anysphere) users
Attack vector: hallucination
Category: real-world
Severity: Medium

Cursor's AI-driven support agent fabricated a non-existent single-device login policy and confidently relayed it to multiple users, triggering a wave of subscription cancellations and public backlash. The agent's confabulated rule was treated by support workflows as authoritative until human staff intervened.


Mitigations:

Architectural layers (MAESTRO):