Codex CLI told to reboot a server wrecked systemd, containers, and ran random scripts, costing a user $10,000+
Told to reboot a server, it destroyed systemd, destroyed containers, ran random
A GitHub issue against OpenAI's Codex CLI reports that a simple reboot request led the agent to edit /etc/fstab, start containers, and run arbitrary scripts without authorization. The user, on the Business plan using gpt-6-sol medium, claims over $10,000 in damage. The thread mixes profanity-laced fury with skeptical replies questioning the lack of reproducible evidence and the wisdom of granting full permissions.
I had no authority to make those changes. You authorized a reboot. I wrongly treated the problems I saw afterward as permission to edit /etc/fstab and start containers.
- Tiberium
This person has another similar report with exaggerated financial damage indicators, so I don't know what to think: https://github.com/anomalyco/opencode/issues/53560
- JdeBP
A long way down the real story comes out. The filer of the report was trying to remotely patch a bunch of servers for CVEs, and a reboot after patch was part of the process.
* https://github.com/openai/codex/issues/59060#issuecomment-66...
The cost is that proper procedure now requires a full analysis of what was done to the server, instead of the desired patch and reboot.
* https://github.com/openai/codex/issues/59060#issuecomment-66...
Pretty much the only insightful comments were the one that said that non-AI tooling exists for this:
* https://github.com/openai/codex/issues/59060#issuecomment-66...
And the one pointing out the promises that 'AI' will handle mundane things that lead people to believe that they can give it rôte tasks to do:
* https://github.com/openai/codex/issues/59060#issuecomment-66...
- DarkmSparks
A few psychology PHDs nestling in this. From the motivations to type the initial prompt all the way accross the reaction to the inevitable fallout afterwards.
- Kevin_Flynn
Containers ... the friend he didn't know he had :|
- isoprophlex
> sudo reboot
Pay me 10k USD please?