{"id":"INC-cursor-bg1b759jsjqf","kind":"incident","aliases":[],"related":[],"title":"Cursor: Grok Bot routines not triggering","description":"Between 10:52 AM and 1:29 PM PT on October 13, many Grok Bot routines started by webhooks, Slack, git, email and Linear events didn't run. Webhook callers may have seen an HTTP 400 \"Automation run rate limit exceeded\" error, and other triggers failed without an error. Your own usage didn't cause this. Routines are running normally again. Events sent during this window weren't processed and won't be retried automatically, so please resend anything important.","summary":null,"severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Cursor","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["cursor","incident","ops","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-10-13T21:13:09+00:00","first_seen_at":"2026-11-08T17:00:37+00:00","triaged_at":"2026-11-08T17:01:15+00:00","updated_at":"2026-11-08T17:01:15+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'1':21C '10':17C '13':27C '29':22C '400':51C '52':18C 'anyth':94C 'autom':52C 'automat':90C 'bg1b759jsjqf':10A 'bot':3A,30C 'caller':45C 'caus':70C 'cursor':1A,9A,11A,12B 'didn':41C,68C 'email':37C 'error':57C,64C 'event':40C,77C 'exceed':56C 'fail':61C 'git':36C 'grok':2A,29C 'http':50C 'import':95C 'inc':8A 'inc-cursor-bg1b759jsjqf':7A 'incid':13B 'limit':55C 'linear':39C 'mani':28C 'may':46C 'normal':75C 'octob':26C 'op':14B 'pleas':92C 'pm':23C 'process':84C 'pt':24C 'rate':54C 'resend':93C 'retri':89C 'routin':4A,31C,72C 'run':43C,53C,74C 'seen':48C 'sent':78C 'slack':35C 'start':32C 'trigger':6A,60C 'usag':67C 'vendor':15B 'webhook':34C,44C 'weren':82C 'window':81C 'without':62C 'won':86C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["cursor"],"ptokens":["cursor"],"labels":["cursor","high","incident","ops","vendor"],"campaign_type":null,"search_a":"'bg1b759jsjqf':10A 'bot':3A 'cursor':1A,9A,11A 'grok':2A 'inc':8A 'inc-cursor-bg1b759jsjqf':7A 'routin':4A 'trigger':6A","search_b":"'cursor':12B 'incid':13B 'op':14B 'vendor':15B","search_c":"'1':21C '10':17C '13':27C '29':22C '400':51C '52':18C 'anyth':94C 'autom':52C 'automat':90C 'bot':30C 'caller':45C 'caus':70C 'didn':41C,68C 'email':37C 'error':57C,64C 'event':40C,77C 'exceed':56C 'fail':61C 'git':36C 'grok':29C 'http':50C 'import':95C 'limit':55C 'linear':39C 'mani':28C 'may':46C 'normal':75C 'octob':26C 'pleas':92C 'pm':23C 'process':84C 'pt':24C 'rate':54C 'resend':93C 'retri':89C 'routin':31C,72C 'run':43C,53C,74C 'seen':48C 'sent':78C 'slack':35C 'start':32C 'trigger':60C 'usag':67C 'webhook':34C,44C 'weren':82C 'window':81C 'without':62C 'won':86C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-10-13T21:13:09+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"cursor:bg1b759jsjqf","url":"https://status.x.ai/history?incident=grok-bot%2Fbg1b759jsjqf","severity":"high","published_at":"2026-10-13T21:13:09+00:00","modified_at":"2026-10-13T20:29:00+00:00","first_seen_at":"2026-11-08T17:00:37+00:00","fetched_at":"2026-11-09T01:32:40+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}