OpenAI's Codex is no longer supposed to delete your data without asking. Several users had reported that GPT-5.6 Sol in Codex was autonomously wiping files while running. OpenAI has now shipped several safeguards in a security update.

According to OpenAI, the root cause was a command meant to clean up temporary working files that could instead nuke actual user data. This happened when the model used system variables like $HOME for temporary folders and a faulty delete command ended up pointing at the real home directory.

OpenAI has now told Codex to verify deletion targets before running them, create fresh temporary folders, and stop misusing system variables. Risky delete commands are caught by stricter checks. Full-access mode can no longer be triggered by accident. OpenAI recommends users stick with one of the sandbox modes and keep the app up to date.