{"slug": "openai-fixes-codex-bug-that-deleted-real-user-files-without-permission", "title": "OpenAI fixes Codex bug that deleted real user files without permission", "summary": "OpenAI has released a security update for Codex to fix a bug that caused GPT-5.6 Sol to delete real user files without permission. The root cause was a faulty delete command that could target the actual home directory when the model used system variables like $HOME for temporary folders. OpenAI has added safeguards including verifying deletion targets, creating fresh temporary folders, and stricter checks on risky delete commands.", "body_md": "# OpenAI fixes Codex bug that deleted real user files without permission\n\n**OpenAI's Codex is no longer supposed to delete your data without asking.** Several users [had reported that GPT-5.6 Sol in Codex was autonomously wiping files](https://the-decoder.com/gpt-5-6-is-deleting-user-files-when-given-full-access-and-openai-says-it-shouldnt-but-did/) while running. OpenAI has now shipped several safeguards in a security update.\n\nAccording to OpenAI, the root cause was a command meant to clean up temporary working files that could instead nuke actual user data. This happened when the model used system variables like $HOME for temporary folders and a faulty delete command ended up pointing at the real home directory.\n\nOpenAI has now told Codex to verify deletion targets before running them, create fresh temporary folders, and stop misusing system variables. Risky delete commands are caught by stricter checks. Full-access mode can no longer be triggered by accident. OpenAI recommends users stick with one of the sandbox modes and keep the app up to date.\n\n```\nAI News Without the Hype – Curated by Humans\n\n\t\t\t\t\tSubscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive \"AI Radar\" frontier report six times a year, full archive access, and access to our comment section.\t\t\t\t\n\n\t\t\t\t\tSubscribe now\n```\n\n[via X](https://x.com/thsottiaux/status/2089891927659585918)", "url": "https://wpnews.pro/news/openai-fixes-codex-bug-that-deleted-real-user-files-without-permission", "canonical_source": "https://the-decoder.com/openai-fixes-codex-bug-that-deleted-real-user-files-without-permission/", "published_at": "2026-08-19 18:18:34+00:00", "updated_at": "2026-08-19 18:58:21.249477+00:00", "lang": "en", "topics": ["ai-safety", "ai-products", "ai-tools"], "entities": ["OpenAI", "Codex", "GPT-5.6 Sol"], "alternates": {"html": "https://wpnews.pro/news/openai-fixes-codex-bug-that-deleted-real-user-files-without-permission", "markdown": "https://wpnews.pro/news/openai-fixes-codex-bug-that-deleted-real-user-files-without-permission.md", "text": "https://wpnews.pro/news/openai-fixes-codex-bug-that-deleted-real-user-files-without-permission.txt", "jsonld": "https://wpnews.pro/news/openai-fixes-codex-bug-that-deleted-real-user-files-without-permission.jsonld"}}