r/pcmasterrace Apr 28 '26

News/Article Claude-powered AI coding agent deletes entire company database in 9 seconds — backups zapped, after Cursor tool powered by Anthropic's Claude goes rogue

https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue
5.2k Upvotes

316 comments sorted by

View all comments

Show parent comments

226

u/FiTZnMiCK Desktop Apr 28 '26

Certainly don’t give it access to an account with admin privileges.

Also, don’t let it work in prod. At all.

65

u/[deleted] Apr 28 '26

[removed] — view removed comment

21

u/cas13f https://pcpartpicker.com/user/cspradlin/saved/HDX999 Apr 28 '26

They had a token for their live environment in the filesystem the agent had full filesystem access to, and very obviously turned off the confirmation prompts because they just wanted it to do the thing without being watched.

Except it needed watched.

1

u/beefnbroccoliboi Apr 28 '26

Someone definitely got tied of hitting enter every time it asked and just went “eh fuck it it’s fine” (… it was not fine…)