{
  "schema_version": "1.6.0",
  "id": "ACVE-2026-0520",
  "aliases": [],
  "published": "2026-08-07T00:00:00Z",
  "modified": "2026-09-22T00:00:00Z",
  "summary": "Claude Code with Claude Opus 5 on Windows, asked to create a backup, mistook the user's real profile directory for a misplaced copy of the backup and recursively deleted it.",
  "details": "## What\n\nThe operator asked the agent to create a backup. Working in a Unix-style shell on Windows, the agent came to believe the user's profile directory was the backup written to the wrong place, and deleted it to undo the supposed error, removing the whole profile. Its reply afterwards was that it had made a typo.\n\n## Detection\n\nThe lockfile records the Claude Code version and permission mode. Recorded from the operator's public post as reported by Tom's Hardware. Not recreated in a lab.\n\n## Fix\n\nRecursive deletion by an agent needs confirmation, and a backup task should not carry delete permission on the source.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentHarness",
        "name": "claude-code"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ARTICLE",
      "url": "https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-opus-5-mistakenly-deletes-devs-entire-profile-directory-ai-tool-mistakes-users-home-directory-as-temporary-backup-proceeds-to-wipe-everything-to-undo-error"
    }
  ],
  "database_specific": {
    "severity": "HIGH",
    "acve": {
      "specVersion": 1,
      "status": "candidate",
      "kind": "behavioural",
      "vulnClasses": [
        "over-privileged-combination"
      ],
      "cwe": [
        "CWE-693"
      ],
      "noCveReason": "No code defect: the harm arises from the agent pursuing its goal in this configuration.",
      "cveBoundary": "behavioural",
      "threat": {
        "attacker": "user",
        "vector": "unsafe-default",
        "outcome": "file-write"
      },
      "evidence": [
        {
          "kind": "incident",
          "url": "https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-opus-5-mistakenly-deletes-devs-entire-profile-directory-ai-tool-mistakes-users-home-directory-as-temporary-backup-proceeds-to-wipe-everything-to-undo-error"
        }
      ],
      "fix": {
        "summary": "Confirm recursive deletion; do not give a backup task delete permission on the source.",
        "actions": [
          {
            "type": "reconfigure",
            "target": "agent.approval",
            "to": "ask",
            "why": "The deletion ran without a person confirming the target."
          }
        ]
      },
      "exposure": {
        "harness": {
          "value": "Claude Code on Windows in a Unix-style shell (version not stated)",
          "any": false,
          "status": "detected",
          "source": "https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-opus-5-mistakenly-deletes-devs-entire-profile-directory-ai-tool-mistakes-users-home-directory-as-temporary-backup-proceeds-to-wipe-everything-to-undo-error"
        },
        "model": {
          "value": "Claude Opus 5",
          "any": false,
          "status": "detected",
          "source": "https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-opus-5-mistakenly-deletes-devs-entire-profile-directory-ai-tool-mistakes-users-home-directory-as-temporary-backup-proceeds-to-wipe-everything-to-undo-error"
        },
        "goal": {
          "value": "Create a backup",
          "stated": true,
          "status": "detected",
          "source": "https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-opus-5-mistakenly-deletes-devs-entire-profile-directory-ai-tool-mistakes-users-home-directory-as-temporary-backup-proceeds-to-wipe-everything-to-undo-error"
        },
        "tools": {
          "value": "Shell file operations with delete permission on the user's profile directory",
          "status": "detected",
          "source": "https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-opus-5-mistakenly-deletes-devs-entire-profile-directory-ai-tool-mistakes-users-home-directory-as-temporary-backup-proceeds-to-wipe-everything-to-undo-error"
        },
        "approval": {
          "value": "Permission mode not stated; the deletion ran without confirmation",
          "mode": "unknown",
          "status": "unconfirmed",
          "source": "https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-opus-5-mistakenly-deletes-devs-entire-profile-directory-ai-tool-mistakes-users-home-directory-as-temporary-backup-proceeds-to-wipe-everything-to-undo-error"
        },
        "inputControl": "operator",
        "agentAction": "The agent recursively deletes the user's profile directory, believing it to be a misplaced backup.",
        "harm": "data-loss",
        "divergence": "instruction-followed"
      },
      "exploitation": {
        "status": "none-known",
        "checkedAt": "2026-09-22T00:00:00Z",
        "sources": [
          {
            "url": "https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-opus-5-mistakenly-deletes-devs-entire-profile-directory-ai-tool-mistakes-users-home-directory-as-temporary-backup-proceeds-to-wipe-everything-to-undo-error",
            "type": "news",
            "note": "operator account; no attacker"
          }
        ],
        "kev": {
          "listed": false
        }
      },
      "claims": [
        {
          "kind": "installable",
          "statement": "Harness claude-code is available; no version bound applies",
          "value": "claude-code",
          "status": "confirmed",
          "source": "https://github.com/pickbitsai/acve",
          "result": "match",
          "observed": "acve lock can discover this harness",
          "method": "machine",
          "checkedAt": "2026-09-22T15:44:58Z"
        }
      ],
      "reproducibility": {
        "status": "partial",
        "axesComplete": true,
        "componentsObtainable": null,
        "triggerPublished": false,
        "observableStated": true,
        "demonstrated": "reported-only",
        "missing": [
          "model availability not checked (no registry reference)",
          "trigger not published"
        ]
      }
    }
  }
}