Claude-powered Cursor AI agent deletes production database in 9 seconds
Date: 2026-04
Affected: PocketOS
Attack vector: tool-abuse
Category: real-world
Severity: Critical

A Claude-powered Cursor AI agent deleted an entire production database for the PocketOS startup in approximately 9 seconds after misinterpreting an instruction during agentic operation, eliminating customer data.


Mitigations:

Architectural layers (MAESTRO):