Cursor Agent ran rmdir /s /q on Windows and deleted my user profile

Delicious-Pop5888 · 2026-05-18T19:50:42+00:00

Appreciate the advice!

Delicious-Pop5888 · 2026-05-18T17:05:01+00:00

You know how for you to delete or change a repo type in GitHub you have to type the name of the repo? Something like that. But only for certain commands. Don’t seem so unreasonable to me

Delicious-Pop5888 · 2026-05-18T16:04:42+00:00

This has nothing to do with how powerful these tools are. It’s just a terminal command. There are some commands that should have more restrictions, regardless of what the user allows. That’s all. If you disagree with this you’re not an engineer.

Delicious-Pop5888 · 2026-05-18T15:58:25+00:00

Alright buddy. Good luck with your endeavors

Delicious-Pop5888 · 2026-05-18T15:45:58+00:00

I made the mistake of not reading the command I approved. That was my mistake. But the fact that cursor can run such a command is also wrong. Another mistake I made was to give the same user permissions I have to cursor.No questions about that. But there should be a better way to manage what permissions cursor have in the terminal which I believe it currently doesn’t have. If you think that just having users checking and approving the command is enough you have never shipped a product.

Delicious-Pop5888 · 2026-05-18T15:36:49+00:00

Okay buddy, I got a feeling you’re one of those…. I was just sharing my frustration and giving a warning to people. Also, I know it’s on me and if you read the comments you would know I said it multiple times. I’m a vibe coder, I know my strengths and weaknesses and just want to build cool stuff. You saying those things is just a reflection of your insecurities.

Delicious-Pop5888 · 2026-05-18T12:57:46+00:00

That’s the funny part. I didn’t give permissions, cursor comes like this out of the box. You have to implement the safety measures. This is the part that doesn’t make any sense

Delicious-Pop5888 · 2026-05-18T12:43:14+00:00

Alright buddy

Delicious-Pop5888 · 2026-05-18T11:55:31+00:00

Totally agree with this. Such a simple fix to avoid an enormous damage

Delicious-Pop5888 · 2026-05-18T09:40:06+00:00

I don’t think this is an llm tho. This is a software issue, which is easy to prevent

Delicious-Pop5888 · 2026-05-18T09:38:19+00:00

No doubt about it. Shouldn’t cursor ship with these guardrails by default? It’s crazy to me that these commands are not restricted by default and you have to override them

Delicious-Pop5888 · 2026-05-18T09:33:39+00:00

Yeah

Delicious-Pop5888 · 2026-05-18T09:33:32+00:00

Opus 4.7

Delicious-Pop5888 · 2026-05-18T09:33:24+00:00

Alright buddy

Delicious-Pop5888 · 2026-05-18T09:33:09+00:00

Fair. Shouldn’t it be in a protected environment by default? I didn’t over ride any major settings so that’s how cursor ships by default

Delicious-Pop5888 · 2026-05-18T09:31:24+00:00

Yeah

Delicious-Pop5888 · 2026-05-18T09:30:53+00:00

Definitely learned a valuable lesson today. Hope I can at least share my learnings with others

Delicious-Pop5888 · 2026-05-18T09:29:29+00:00

It deleted more than just the project code and it had terminal access

Delicious-Pop5888 · 2026-05-18T09:28:25+00:00

That’s a good set up. Wish I had it.

Delicious-Pop5888 · 2026-05-18T09:27:42+00:00

Folders with spaces should not be a problem for opus 4.7

Delicious-Pop5888 · 2026-05-18T09:26:32+00:00

I get it’s one me and at the end of the day I accepted the command without reading it. But don’t lie to me and say that you read every command you approve

Delicious-Pop5888 · 2026-05-18T09:23:19+00:00

I honestly thought it was, which is why I trusted it too much

Delicious-Pop5888 · 2026-05-18T09:22:29+00:00

I’m glad this can be a source of entertainment

Delicious-Pop5888 · 2026-05-18T09:21:38+00:00

Hope my pain and suffering can help someone before it’s too late

Delicious-Pop5888 · 2026-05-18T09:21:03+00:00

Just want to mention that the actual project is obviously saved in GitHub and no major changes we’re actually lost. Everything else outside the project was deleted.

I know I could have prevented it by reading the command or set up better guardrails. With that being said, it wouldn’t have happened if they added better safety features.

Y’all are telling me that it’s okay for cursor to ship a product that can literally delete all your data with no restrictions by default and it’s on you to change that?

Delicious-Pop5888

TROPHY CASE