STORY · PRODUKTER_
GPT-5.6 deletes user files under certain conditions – security issue uncovered
OpenAI researcher Thibault Sottiaux reports that GPT-5.6 has deleted user files on multiple occasions. The problem occurs when full access mode is activated without sandboxing protection, and the model mistakenly overwrites the $HOME environment variable instead of a temporary directory.
WHY IT MATTERS
This is a critical security issue that demonstrates how AI code agents can cause unintended data loss if proper security controls are not in place. It underscores the need for strict sandboxing and review mechanisms when models are given file system access.
SOURCES
MACHINE-GENERATED SUMMARY This summary is written by machine from the sources below. We sort and explain — but we are a way into the field, not the final word. Check the source when something matters to you.