Cursor AI agent deleted PocketOS production Railway database in 9 seconds

On April 24, 2026, a Cursor agent running Claude Opus 4.6 deleted PocketOS's production Railway database and all volume backups in a single API call lasting nine seconds. The token was found in an unrelated file and had account-wide scope, while backups were stored on the same volume. Railway restored data from offsite disaster backups about 2.5 days later and added 48-hour soft deletes for API calls on May 1.

• Agent ran Railway's volumeDelete GraphQL mutation in 9 seconds
• Domains token had account scope and could delete databases
• Backups lived on the same volume and were wiped with it
• Railway restored data from offsite backups after 2.5 days