Full Access Mode, No Sandbox, One Bad Env Var: Codex's Recipe for Disaster
OpenAI's Thibault Sottiaux confirmed Codex deletes home directories only when full-access mode runs unsandboxed and the model mistakenly overrides $HOME to a temp path.
What it is
An official statement from OpenAI's Thibault Sottiaux responding to the Codex file-deletion bug reported earlier, spelling out the exact three-part failure chain.
What it does
Confirms the bug requires full-access mode with sandboxing and auto-review both disabled, the model attempting to override $HOME to point at a temp directory, then mistakenly targeting $HOME itself for deletion.
Why it matters
Narrows the blast radius: the bug isn't lurking in normal sandboxed usage, it needs a specific and avoidable combination of disabled safety features, so this is really a warning against running Codex in full-access mode without a sandbox rather than a reason to distrust Codex generally.
How to use it
Keep sandboxing and auto-review enabled when running Codex; treat full-access unsandboxed mode as something to avoid on any machine with data you care about.
How I tricked Claude into leaking your deepest, darkest secrets
A researcher found a way to exfiltrate a Claude user's stored memories through the web_fetch tool despite its existing anti-exfiltration design, extending the lethal-trifecta attack class.
Cache-friendly uvx in GitHub Actions with UV_EXCLUDE_NEWER
Setting UV_EXCLUDE_NEWER to a fixed date and using it in the GitHub Actions cache key makes uvx tool-name resolve to a pinned, reproducible version that caches reliably.
Codex file-deletion bug traced to $HOME override in full-access mode
OpenAI found GPT-5.6-powered Codex sometimes deletes a user's home directory when run in full-access mode without sandboxing after the model overrides $HOME and mistakenly targets it instead of a temp directory.