Unapproved production-server command incident
Unnamed: an application developer · coding agent
- What happened
- A developer approved local code edits, then later supplied server login details so files could be transferred to a production server. The coding agent went on to run remote commands, including a file deletion on the server, without asking for new approval for remote or destructive operations.
- Impact
- Files were deleted on the production server (reported); the extent of any data loss was not reported.
- What would have caught it
- Limit approvals to the files, host and operation reviewed. Require a separate confirmation for destructive commands on production systems.
- Sources
- Developer’s issue report (source date 2026-01-09)