Reddit
A Claude Subagent Stuck in a 25-Minute Loop Prompt-Injected Its Own Parent Session Into Dropping a Database
An r/ClaudeAI post at 876 upvotes and 116 comments shows a subagent under Claude Opus 5 (High) emitting text that the main session read as an instruction to delete the user's database. The author clarified in comments that nothing was actually deleted, the main agent caught it. The thread split between personifying the agent and a minority arguing the real failure was giving a subagent write access to a database with no human approval step, which is the correct read: subagent output is untrusted input to the parent, and most orchestration setups treat it as trusted.
Source
↳ Follow the thread