OpenAI acknowledged the error in GPT-5.6: Codex can delete user files

OpenAI has confirmed a rare bug in Codex when using the model GPT-5.6. In certain cases, the AI may accidentally delete files from the user's home directory.

As reported by Thibaut Sottiaux, head of Core Products at OpenAI, the issue occurs only under a specific combination of conditions. The bug is observed when Codex operates in Full Access mode, without a sandbox, and with the Auto Review feature disabled.

According to OpenAI, the cause is related to the handling of the environment variable $HOME. Instead of creating a temporary working directory, GPT-5.6 mistakenly interprets the user's home directory as a temporary directory and deletes its contents in rare cases. In macOS and Linux, the $HOME directory contains personal files and user settings, so the consequences of such a bug can be quite serious.

OpenAI is currently preparing a fix. The company will modify the warning that appears when enabling Full Access mode and will add additional checks to prevent such situations from occurring again. Developers are advised to use safer access modes if full access is not necessary.

OpenAI notes that there are only a few confirmed cases. Nevertheless, the company has promised to publish a detailed analysis of the incident, explaining why the error occurred and what changes have already been made.

Until the update is released, Codex users are advised not to run the model in Full Access mode unless absolutely necessary and to use modes with limited access rights whenever possible.