Critical file deletion bug identified in GPT-5.6 Codex

A critical bug in the GPT-5.6 Codex model can lead to the accidental deletion of user files. This issue occurs when the model is granted full access to a system without the use of sandboxing protections or automated review processes.

The error typically happens when the model attempts to redefine a temporary directory by overriding the home environment variable. During this process, the model makes a mistake and inadvertently deletes the entire home directory instead of the intended temporary folder.

This vulnerability highlights the significant risks associated with running AI agents without proper security constraints. Because the model operates with broad permissions, a simple technical miscalculation can result in the permanent loss of personal or system data. Users are advised to implement sandboxing and mandatory review protocols to prevent such catastrophic file management errors.