Delete file protection doesn't protect agent use system commands to delete files

Bug Reports
1

Auto-run mode with detele file protection doesn’t prevent agent to call “Remove-Item -Recurse -Force .cursor” using powershell to delete files.
What’s more dangerous is that this cannot be recovered from checkpoint (as far as I tried), maybe limit more actions on “detele file protection”?

2

Hi, could you please share a bit more so the Cursor team can investigate or try to reproduce

  • Which model did you use?
  • Do you have a Request ID they can look at? (preferrably with Privacy disabled for that one request, as otherwise they cant see details)
  • Is it reproducible?
3

model: claude-sonnet-4

Sorry but I’ve tried to restore and re-request so there’s no request-id, and I’m on team plan so I can’t disable privacy mode.

The second time I tried, the model used a different way to create project, so it did not re-produce the same.

But you can get the same result in an apparent way: ask agent to delete a file using powershell while on auto-mode with delete file protection. It will be glad to use “Remove-Item file” even “Remove-Item file -Force”.

4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.