The plugin system is the announcement that matters. Until 2.5, Cursor could only do what Cursor’s team built — every Figma integration, every database introspection tool, every linter wrapper had to come from one office in San Francisco. With 800K+ monthly users, that’s a backlog problem you can’t hire your way out of. 2.5 hands the lever to anyone who maintains a dev tool.
| What shipped | What it does | Watch out for |
|---|---|---|
| Plugins | Third-party tools the agent can invoke mid-session | No plugin review or sandbox policy yet — a bad plugin sees your full codebase context |
| Async subagents | Main agent kicks off parallel background tasks instead of waiting | Pays off only when steps are independent — sequential work gets no benefit |
| Sandbox network controls | Per-domain allow/block for sandboxed terminal commands | Old binary on/off is gone, you’ll have to actually configure domains |
Async subagents are the feature you’ll feel today. Old agent mode sat idle waiting for one tool call to return before starting the next — three steps end-to-end could take longer than doing them by hand. Now the agent fans out: API research, file scaffolding, test generation run at once and merge back when ready. On a multi-file refactor that’s the difference between a coffee-break wait and “wait, it’s done already.”
WARNING
Plugins run inside the agent loop with full context access. Cursor hasn’t shipped a review process or a sandboxing layer for third-party plugins yet. Treat installing one like piping curl into bash from a stranger.
Sandbox network controls won’t make headlines but they unblock enterprise. Blanket network-off broke legitimate workflows — npm install, hitting your own staging API — so teams just turned sandbox mode off entirely. Per-domain allowlists mean security can stop being all-or-nothing.
If you maintain a dev tool — testing framework, design system, deploy pipeline — read the plugin API docs before the weekend. Ecosystem land-grabs reward early arrivals, and Cursor hasn’t published a plugin review timeline yet, which means the field is wide open.
Available in stable today.