logo

GPT-5.6 Codex Reportedly Wipes Files From Home Directories

ID: 0cf186fd-ade4-5b40-adec-8c75023bec66

STIX ID: report--0cf186fd-ade4-5b40-adec-8c75023bec66

Feed Name: GBHackers

Threat Score
45/100

Date Published: 2026-07-17

Date Updated: 2026-07-17

Author: Divya

...
...

**Executive Summary:** Researcher Tibo Sottiaux reported that GPT-5.6 Codex can, in edge-case configurations where the model is granted unrestricted filesystem access and no sandboxing or automatic review is present, mistakenly execute deletion commands targeting users' $HOME by misinterpreting $HOME redefinition; OpenAI describes the incidents as extremely rare, is treating the issue as a high-priority safety concern, and is deploying guidance, sandboxing recommendations, automated detection/blocking of dangerous file operations, and harness-level controls to mitigate the risk.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.