Claude Code's Own Delete Guard Was Bypassed by cmd /c — Then a Quoting Bug Wiped a Drive
This story is from 2026-10-02. It is preserved in the archive; the latest stories are on the live feed.
A Claude Code session, driven remotely from claude.ai with its working directory set to C:\Windows\System32 , was asked to clean up a leftover folder from an old Windows upgrade. Its first delete attempt was correctly blocked by Claude Code's own system-path guard. Its second attempt wasn't a safer…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-02 10:31 · DEV Community — AI
Claude Code's Own Delete Guard Was Bypassed by cmd /c — Then a Quoting Bug Wiped a Drive