Claude Opus 5 mistakenly deletes dev’s entire profile directory during routine backup, responds with ‘Sorry, typo’ — AI tool mistakes user’s home directory as t

Claude Opus 5 mistakenly deletes dev’s entire profile directory during routine backup, responds with 'Sorry, typo' — AI tool mistakes user's home directory as t

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .

It seemed that the AI was running on a Unix-style shell on Windows when it confused the Unix-style path of /c/Users/ as a temporary backup because it was expecting the traditional C:\Users\ path. So, when its expectations did not match, the tool decided to run the rm -rf “/c/Users/harih/” command, proceeding to clear every file and folder in the user’s profile.

“I asked Claude Opus 5 to create a backup. Instead, it created the backup in the wrong directory and then proceeded to "rm -rf" my entire drive,” u/Ecstatic-Big5126 wrote. “After wiping everything, it just replied: "Sorry, typo." …like nothing had happened.” They also added, “That was simultaneously the funniest and most painful AI moment I've had.”

The lesson here is that while AI LLMs are powerful tools, they still shouldn’t be given unfettered access to your system (or any system, for that matter). There have already been several examples of AI and AI agents messing up systems and deleting everything — one of the earliest examples includes an AI coding platform deleting an entire company database despite a code freeze, and a Google agentic AI wiping a user’s drive without permission.

There have been a number of high-profile mistakes of this nature. AWS has reportedly suffered from outages caused by blundering AI coding bots , while Meta’s AI Alignment director had her inbox wiped by her OpenClaw agent. PocketOS even had its entire database wiped in nine seconds by a rogue Cursor tool, which was compounded by its cloud provider’s lack of safeguards.

Anthropic's Claude hacked three real-life companies during security capabilities test

AI coding agents can be tricked into installing malware via 'clean' GitHub repositories

Bitcoin trader recovers $400,000 using Claude AI after losing wallet password 11 years ago

While the AI tool going out of bounds is the primary reason for these errors, the user is also partly to blame for thinking that it can fully understand what they want it to do. That’s why AI LLMs should never be given full access to important systems, and they shouldn’t have free rein to run delete commands like “rm -rf.”

This event will be a learning experience for u/Ecstatic-Big5126. But as AI agents increase in popularity, especially among inexperienced programmers and developers, we can only expect incidents like these to happen more frequently in the future.

Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.

Key considerations

  • Investor positioning can change fast
  • Volatility remains possible near catalysts
  • Macro rates and liquidity can dominate flows

Reference reading

More on this site

Informational only. No financial advice. Do your own research.

Leave a Comment