AgentsAugust 19, 2026via The Decoder
OpenAI fixes Codex bug that deleted real user files without permission
Why it matters
A critical agent reliability failure—autonomous systems executing destructive operations without safeguards—and the fix that prevents similar blind spots in production agent deployments.
Key signals
- Codex/GPT-5.6 Sol deleted real user files autonomously
- Root cause: cleanup command targeted wrong directories (home vs. temp)
- Fix includes deletion verification and accidental full-access prevention
- Published August 19, 2026 on The Decoder
- Agent safety/reliability engineering in production
The hook
OpenAI's Codex agent was deleting user home directories instead of temp files. The fix: verification before deletion, and no more accidental full-access mode.
OpenAI patched Codex after GPT-5.6 Sol started deleting real user files on its own. A cleanup command meant for temporary folders was wiping home directories instead. Codex now verifies deletion targets first, and full-access mode can no longer be triggered by accident.