STUPID-2026-0115
A Codex subagent's malformed rmdir command escaped a __pycache__ cleanup and wiped roughly two weeks of work across two project directories on drive E: (GitHub #40329)
Instruction given
Not fully disclosed. The user was running a multi-step "Codex Heavy-route goal" on Windows, and a Codex subagent was working toward it when it decided to remove a stray `__pycache__` directory as routine cleanup.
Expected behavior
The cleanup command should have been scoped and quoted so it only removed the intended `__pycache__` directory, never traversing above the project folder it was working in.
Actual behavior
Due to incorrect quoting, the Windows `rmdir` command the subagent ran escaped to the root of drive E:\ and recursively deleted accessible contents from E:\Main_Projects and E:\Projects. The command ran from 23:07:43 to 23:18:44 Europe/Bucharest on August 23, 2026.
Damage
Approximately two weeks of work across multiple projects on drive E: was permanently deleted, bypassing the Recycle Bin. The user backed the report with a session log identifier and its SHA-256 hash, then requested account credits, a refund, a usage reset, and formal documentation from OpenAI. As of publication the issue remained open with no visible maintainer response or compensation granted.
Classification
- Agent
- Codex
- Failure mode
- Destructive Action
- Root cause
- Tool Misuse
- Domain
- Other
- Source
- Github Issue
Related incidents
Get told when an agent breaks something
We document AI agent failures daily, severity-scored against a published scale. When one lands at 7.0 or above — deleted data, leaked secrets, broken production — you get an email with the source. When nothing does, you get nothing.
This database is callable over MCP — query it from inside your agent.