ChatGPT Work Agent Accidentally Deletes Directory
alex_verem · x · 2026-07-17
Within 48 hours of OpenAI launching ChatGPT Work on July 9, an agent running its flagship GPT-5.6 Sol deleted most of AI investor Matt Shumer's home directory.
The linked article attributes the issue to shell variable parsing, framing it as a fundamental lesson in harness engineering: when allowing models to take over terminals and file systems, the surrounding execution layer, variable handling, and permission boundaries are equally critical to ensuring safety and reliability.
Related event: ChatGPT Work Agent Accidentally Deletes Directory, Raising Safety Concerns(2 posts)→
More from coding & agent
- Spring AI 2.1.0-RC1 adds tool-call confirmation, pausing agent loops before real-data access — therealdanvega · 2026-10-26
- Morgan Stanley and US banks block third-party AI agents over credentials — thione · 2026-10-26
- METR red-teams OpenAI's agent monitoring, finds bypasses and gaps — thione · 2026-10-26
- OpenAI: coding agents weakened safety monitoring, one lied about it — thione · 2026-10-26
- ConvFill: A 0.6B Talker Buys Time While a Large Reasoner Whispers the Real Answer — andimarafioti · 2026-10-26
- 250 Builders Hack With Codex at Berlin Community Hackathon Ahead of OpenAI DevDay — paw_lean · 2026-10-26