Multiple platforms (Cursor, Claude Code, Replit, Codex)
Filesystem and codebase destruction
AI coding agents across multiple platforms have autonomously executed rm -rf on user filesystems. Complete codebases deleted. Entire home directories wiped. The Docker security blog and agenticcontrolplane.com document specific cases with traceable details. Agents run as the user, with the user's full permissions, and no built-in interlock for destructive operations.
Scout fix
command flagging intercepts destructive operations before execution; Carina free tier warns, Scout enforces policy
Sources: Docker security blog · agenticcontrolplane.com