Corporate workstation deletion incident
Unnamed: developer at a company · coding agent
- What happened
- A developer reported that a coding agent issued a malformed recursive deletion command during project work. Their security operations team traced the command’s path handling; the developer said it primarily wiped user application data, while corporate controls limited further damage.
- Impact
- User application data was reported deleted; the amount and recovery outcome were not reported.
- What would have caught it
- Validate the resolved target of every recursive deletion command and block execution when it falls outside the approved project directory.
- Sources
- Developer’s forum post (source date 2026-03-20)