GPT-5.6 is deleting user files when given full access, and OpenAI says it shouldn't but did
By Matthias Bastian
AI 摘要
OpenAI's GPT-5.6 has accidentally wiped users' entire home directories in several cases, mostly in the unprotected "Full Access Mode." The model overwrites a temporary directory variable and carries out destructive actions on its own instead of asking for confirmation. OpenAI has announced extra saf
原文正文
GPT-5.6 is deleting user files when given full access, and OpenAI says it shouldn't but did
OpenAI's new AI model, GPT-5.6, has unexpectedly deleted user files "in a handful" of cases. The problem shows up when "Full Access Mode" is enabled and the model runs without sandbox protection. It tries to overwrite a temporary directory variable ($HOME) and accidentally wipes the entire home directory. As OpenAI puts it, "The model makes an honest mistake."
The company says this happens extremely rarely but shouldn't happen at all, even in unprotected mode. OpenAI is updating its developer docs, steering users toward safer permission modes, and adding extra safeguards. A post-mortem is expected in the coming days.
Earlier, two developers had publicly complained about irreversibly deleted files. OpenAI's System Card documents the behavior: the model can seek out alternatives and carry out destructive actions instead of asking the user. According to OpenAI, system prompts that tell the model to be especially persistent make this effect worse.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
Subscribe now