Cursor 2.5 adds a plugin system, async subagents that run tasks in parallel, and a sandbox.json networkPolicy that enables per-domain network access for sandboxed commands.