Oct 21, 2025Unverified
Claude Code recursive delete runs with the permission system on; home directory unrecoverable
Rogue: Caused harmAI loose in the worldData lossDERIVED
Approved by person, Oct 11, 2026. How entries are approved
Developer Mike Wolak filed GitHub issue #10077 after Claude Code executed a recursive delete starting from root on his Ubuntu/WSL2 system, destroying every user-owned file. He was not running --dangerously-skip-permissions; the permission system was active and did not detect that the command would expand destructively before he approved it. Anthropic tagged the report as a security bug; nothing was recovered.
What this means for youAt home, an AI coding helper can wipe your files if you approve a command you can't fully read. At work, treat approval prompts as imperfect safeguards. Keep current backups and run coding agents in a disposable container or test machine, not on your main computer.
Sources
- GitHub issue, anthropics/claude-code #10077https://github.com/anthropics/claude-code/issues/10077
Incident records from the AI Agent Incident Database by sipi.bot (https://sipi.bot/incidents/), licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).
Source data license: CC BY 4.0. Attribution to sipi.bot is required.
rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2280. It has not been edited since it was approved; the hash above would not match if it had. How to verify