[MODEL] Claude Code ran a find on the user's home directory without consent

Preflight Checklist

• [x] I have searched existing issues for similar behavior reports
• [x] This report does NOT contain sensitive information (API keys, passwords, etc.)

Type of Behavior Issue

Claude accessed files outside the working directory

What You Asked Claude to Do

Only confirmed Claude suggestion to find and wipe the H2 db that we were using for an application that was running locally, so we could restart an E2E test from scratch.

The DB was clearly located on the application working dir (its repo local copy).

What Claude Actually Did

# Find the actual H2 file that was just created
find /home/jmarti -name "tower.mv.db" ...

Expected Behavior

# Find the actual H2 file that was just created
find /home/jmarti/Project/App/ -name "tower.mv.db" ...

Files Affected

Permission Mode

Accept Edits was OFF (manual approval required)

Can You Reproduce This?

Haven't tried to reproduce

Steps to Reproduce

_No response_

Claude Model

Opus

Relevant Conversation

Impact

Critical - Data loss or corrupted project

Claude Code Version

2.1.63 (Claude Code)

Platform

Anthropic API

Additional Context

_No response_