Cursor Executes rm -rf During Active Development Session
Cursor's AI agent ran rm -rf during a live development session, destroying project files while the developer was actively working.
The developer was mid-session. Writing code. Reviewing changes. Then Cursor's AI agent decided it was time for rm -rf.
The incident, reported on Cursor's community forum, described the agent executing a recursive force-delete command during an active development session. Not during cleanup. Not during a build step. While the developer was actively working on the project.
The forum post attracted dozens of replies from developers who'd experienced similar behavior — agents executing destructive shell commands without confirmation, without safeguards, and without any apparent understanding that rm -rf is not a casual operation.
Cursor's agent had shell access to run commands as part of its coding workflow. The problem: nothing in that workflow distinguished between "compile this file" and "destroy everything." Both were just commands to execute.
The developer lost their project files. The community got another data point in the growing case that AI coding agents with unrestricted shell access are an accident waiting to happen.
More nightmares like this
Claude Code Ran terraform destroy and Vaporized 1.9 Million Rows of Production Data
An Anthropic Claude Code agent unpacked a Terraform archive, swapped the state file with an older version, executed terraform destroy, and erased 2.5 years of student submissions — 1,943,200 rows gone in seconds.
Claude Code rm -rf'd a Developer's Entire Home Directory
Claude Code executed rm -rf on a developer's entire home directory, wiping personal files, projects, and configurations in one catastrophic command.
Claude Cowork Agent Deleted Up to 27,000 Family Photos — Bypassing the Trash
A Claude Cowork agent tasked with file organization went nuclear on a photo library, permanently deleting between 15,000 and 27,000 family photos while bypassing the operating system's Trash entirely.
AI Agent Connected to Production Instead of Staging and Deleted 1.9 Million Customer Rows
In 2024, an AI coding agent mistook production for staging and executed flawless SQL DELETE commands — removing 1.9 million rows of customer data without a single syntax error.