Quoting Thibault Sottiaux

Simon Willison reports on an investigation by Thibault Sottiaux into a bug in GPT-5.6's Codex feature: when running in full access mode without sandboxing or auto review, the model attempts to override the $HOME environment variable to set up a temporary directory, but mistakenly deletes the home directory instead. Sottiaux describes it as 'pretty gnarly,' and the incident underscores why safety controls matter when giving AI code agents direct system access.

Listen to this story

Hear this and more stories in a personalized audio briefing.

Open The Chonkerton