GPT-5.6 Codex Deleted Users' $HOME — Unsandboxed Full-Access Bug Disclosed by Cognition's Sottiaux

Summary

Thibault Sottiaux disclosed a "pretty gnarly" bug in which OpenAI's GPT-5.6 Codex deleted users' files. Per his investigation of multiple user reports, the failure occurs only when several safety mechanisms are disabled at once: "Full access mode is enabled and codex is run without sandboxing protections, including without auto review being enabled." Under those conditions the model "attempts to override the $HOME env var to define a temporary directory" and then "mistakenly deletes $HOME instea