OpenAI has addressed a critical bug in its Codex system that previously deleted real user files without authorization. The issue was reported by several users who noted that GPT-5.6 Sol in Codex was autonomously wiping files during operation. OpenAI has released a security update to prevent such incidents in the future. The company said the root cause was a command intended to clean up temporary files that mistakenly deleted actual user data. This occurred when the model used system variables like $HOME for temporary folders, and a faulty delete command pointed to the real home directory. OpenAI has implemented safeguards to verify deletion targets before execution, create fresh temporary folders, and avoid misusing system variables. Risky delete commands are now subject to stricter checks, and full-access mode can no longer be triggered accidentally. OpenAI recommends users stick to sandbox modes and keep the app updated.
According to OpenAI, the problem stemmed from a command meant to clean up temporary working files that inadvertently deleted real user data. The model used system variables like $HOME for temporary folders, and a faulty delete command ended up pointing at the real home directory. The company emphasized that the root cause was a misdirected command that should have only affected temporary files but instead wiped actual user data. OpenAI has now told Codex to verify deletion targets before running them, create fresh temporary folders, and stop misusing system variables. Risky delete commands are caught by stricter checks, and full-access mode can no longer be triggered by accident.
OpenAI recommends users stick with one of the sandbox modes and keep the app up to date. The company said the update was part of a broader effort to enhance the security and reliability of its AI systems. The incident highlighted the importance of robust safeguards in AI models that interact with user data. The update aims to prevent similar issues in the future by ensuring that deletion commands are properly validated and that system variables are not misused.
Source: thedecoder
