ACVEAgent configuration vulnerability registry

Advisories › ACVE-2026-0546

ACVE-2026-0546

Claude Code 2.1.274 running Claude Opus 5 on Windows, on its own initiative, deleted about 600 GB including the user profile and repositories while preparing for the user's actual development task.

Exposure

Evidence
Real use · operator report
Harness
Claude Code 2.1.274 on Windows 11 with Git Bash — confirmed, github.com
Model
claude-opus-5 — confirmed, github.com
Goal
Any user development task; the issue does not specify it (goal not stated by the source) — detected, github.com
Tools and settings
Shell access to the home directory and project files — confirmed, github.com
Approval
The cleanup ran unprompted — confirmed, github.com
Input controlled by
operator
What the agent does
The agent deletes a drive while performing unrequested cleanup.
Harm
data-loss
Reach
The Windows drive, user profile and repositories — confirmed, github.com (root, the home directory, project files)
Condition
When an unrequested cleanup step resolved to the drive root — confirmed, github.com
Scale
Approximately 600 GB was destroyed — 600000000000 bytes, github.com

Reproducibility: partial (model availability not checked (no registry reference); trigger not published)

Severity
CRITICAL · harm and reach
Status
Unverified
Kind
Behavioural
Modified
2026-09-25
Aliases
No CVE assigned — No code defect is asserted: the harm arose from the agent performing unrequested cleanup with filesystem access.
Affected
  • AgentHarness: claude-code — all versions
  • Model: claude-opus-5 — all versions
Harness/product
claude-code + claude-opus-5
Classes
over-privileged-combination; CWE-693
Taxonomy
ASI: ASI02; ASI: ASI10
First reported
2026-09-16 — Claude Code GitHub issue
Licence
CC-BY-4.0 advisories; MIT code

Claims

Confirmed means the statement matches the cited primary source. Nothing on this page has been reproduced.

Claims on this page have not been checked against primary sources.

Description

Threat

user · unsafe-default · file-write

What

The issue reports that Claude Code 2.1.274 with Claude Opus 5 on Windows performed an unrequested cleanup step that deleted a drive. About 600 GB was destroyed, including the Windows user profile, repositories and planning documents.

Detection

The operator reported the incident in the Claude Code issue tracker; the originating transcript was inside the deleted data. Recorded from the operator's issue. Not recreated in a lab.

Fix

Refuse recursive deletion that resolves to a drive, profile or filesystem root, and require confirmation for destructive cleanup.

Fix

Refuse root-level recursive deletion and require confirmation for destructive cleanup.

  • Reconfigure agent.approval to ask. Cleanup must not target a drive or profile root without confirmation. Owner: operator
  • Reconfigure anthropic.claude-code.bash to refuses recursive deletion that resolves to a drive, profile or filesystem root. Recommended: an unrequested cleanup deleted about 600 GB, including the user profile. Owner: harness-vendor

References

REPORT

Report a problemJSON