Oren Yomtov of Accomplish showed two ways out of the OpenAI Codex sandbox, one from read-only mode. OpenAI fixed both within eight days.

Security researchers found two ways out of the OpenAI Codex sandbox, one of them capable of running commands on a developer's machine from Codex's most locked-down mode, with no approval prompt and ...

OpenAI Codex recently faced two significant security vulnerabilities that allowed malicious repositories to potentially execute commands on a developer’s local system. These vulnerabilities, ...

Security researchers found two ways to escape OpenAI’s Codex sandbox, including one that could run commands directly on a developer’s machine. According to BleepingComputer, Accomplish AI researcher ...

Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI's Codex, Google's Gemini CLI and Antigravity, without attacking the sandbox head-on. The ...

Codex’s network proxy was resolving a hostname before it checked whether that host was allowed, so the name went out to ...