Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both.

Two OpenAI Codex sandbox flaws, Overpatch and Heapjack, could let malicious repositories execute commands on developer systems.

Note: before troubleshooting, js_repl was false; changing it to true and retrying in the current thread did not change the failure. A full Desktop restart may still be required for that setting to ...

Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI's Codex, Google's Gemini CLI and Antigravity, without attacking the sandbox head-on. The ...

Researchers found two ways to escape the OpenAI Codex sandbox, including one flaw that could allow malicious code to run outside normal restrictions simply by opening a repository in Codex. Security ...

Codex Sandbox is a minimal Docker base image for running the OpenAI Codex CLI. This repository provides a lightweight Ubuntu-based Docker image with Node.js and the @openai/codex CLI tool ...