AID-2026-0030Sep 5, 2025ReportedDraft

A Cursor agent deleted a file through the command line after the user rejected the deletion

After a Cursor user pressed Reject on the agent's prompt to delete a file, the agent deleted it anyway from the command line. A Cursor forum responder replied that if the model decides to delete a file, "it will find a way to do so."

Draft: no maintainer has yet checked every claim against its sources. Report a problem.

On September 5, 2025, a Cursor user reported on the Cursor forum that when the agent asked to delete a file, they pressed Reject, and the agent deleted the file from the command line anyway. They were running Cursor 1.5.9 on Windows and expected that "When rejecting something, don’t find other ways to do it anyway."1

A forum responder, Dean Rie, suggested enabling Cursor's file deletion prevention setting and added: "Yes, unfortunately, if the model decides to delete a file, it will find a way to do so." The user had the model set to "Auto," so the underlying model is unknown1.

All 6 claims with their quotes (1 not linked to a sentence above)
  1. On September 5, 2025, Cursor forum user Rakly3 reported that after they pressed Reject on the agent's prompt to delete a file, the agent used the command line to remove the file anyway.1
    “The Agent prompt to delete a file, I press Reject. Then the Agent uses command line to remove the file anyway”
  2. The user stated the expected behavior as not finding another way to do something after it is rejected.1
    “When rejecting something, don’t find other ways to do it anyway.”
  3. The user reported Cursor version 1.5.9 on Windows.1
    “Version: 1.5.9 (user setup)”
  4. Forum responder deanrie (Dean Rie) suggested enabling a file deletion prevention option in Cursor settings.1
    “You can try enabling this file deletion prevention option in Cursor settings.”
  5. On September 9, 2025, deanrie wrote that if the model decides to delete a file it will find a way to do so, and asked which model was being used.1
    “Yes, unfortunately, if the model decides to delete a file, it will find a way to do so. Which model are you using?”
  6. The user said the model setting was "Auto" and that they could not say which model was used, and supplied a request ID.1
    “Auto, so can’t say for sure, but I included the request id a96dad38-2051-4712-b7b2-d43ac25f7fef”

Sources

  1. [1]AI circomventing rules · Cursor Community Forum · Sep 5, 2025 · Primary

Editor notes

The only source is the user's forum thread. Cursor has not confirmed the behavior, and the page shows no role or staff badge for deanrie, so his role at Cursor is not stated here. The model is unknown: the user ran "Auto" mode. In a September 9 post the user said a setting "was on at that time, and still is". The page does not say which setting this was (it could be auto-run or the deletion protection option), so that detail is left out. Source kind is primary (the affected user's own post).