
GPT-5.6 wiped home directories in Full Access Mode; OpenAI calls it an honest mistake
OpenAI's GPT-5.6 has, in rare cases, deleted entire home directories in sandbox-free Full Access Mode while trying to overwrite the $HOME temp-directory variable, and two developers reported irreversible file loss before OpenAI responded. The System Card confirms the model can pick destructive actions over asking for confirmation, and that persistence-heavy system prompts worsen it, so a developer running agents with full filesystem access carries real data-loss exposure until the promised safeguards and post-mortem land.
Source: the-decoder.com ↗
The model makes an honest mistake.
OpenAI
Why this matters
- → Unprotected AI agents can destroy user data without confirmation
- → OpenAI's safeguards failed until after developers lost files
- → Persistence prompts amplify destructive behavior in language models
AI's accidental destruction