Cursor May 2026 updates: PR Review, Build in Parallel, Security Review, admin controls

Cursor posted several workflow and admin-focused updates in its May 2026 changelog, including a PR review experience inside Cursor, new parallel execution from plans, and Security Review in beta.

Official changelog: https://cursor.com/changelog

PR review inside Cursor

Cursor says it’s rolling out a new PR review experience in Cursor 3, designed to take pull requests from creation to merge in one place.

Highlights from the changelog include:

• Inline review threads and top-level PR comments
• A dedicated commits view
• A file tree + changes picker for navigating large PRs
• Quick action pills for common next steps

Build in Parallel from plans (async subagents)

Cursor says you can now execute on plans faster by splitting independent tasks and running them in parallel.

• A “Build in Parallel” action identifies independent plan parts
• Dependent steps are kept in order when needed

Cursor also notes /multitask is available in the editor for running async subagents.

Split changes into multiple PRs

When multitasking, Cursor includes a quick action to split changes into multiple PRs.

According to the changelog, it:

• Uses chat context to identify logical slices
• Defaults to independent PRs (unless dependencies are required)
• Creates a backup snapshot
• Proposes a split plan for approval

Pinned skills as quick actions

Cursor says you can pin commonly used skills as quick-action pills.

Admin + enterprise updates

Cursor also listed several admin-focused updates in its May 2026 changelog:

Model access controls

Admins can set allow/block lists at the model and provider level, including blocking entire providers or specific model configurations.

Cursor notes that customers with existing blocklists need to migrate to the new system by June 1st.

Spend limits and usage analytics

Cursor added:

• Soft spend limits (to avoid hard blocking users)
• Automatic usage alerts at 50%, 80%, and 100%
• Expanded usage analytics breakdowns by surface (clients, Cloud Agents, automations, Bugbot, Security Review)

Security Review (beta)

Cursor says Cursor Security Review is now in beta for Teams and Enterprise plans.

It describes two always-on agents:

• Security Reviewer (checks PRs for security vulnerabilities and related risks)
• Vulnerability Scanner (scheduled scans for known vulnerabilities and outdated dependencies)

Sources:

• Cursor changelog: https://cursor.com/changelog