#codex


Researchers escape OpenAI Codex sandbox to run commands on host

Sep 20, 2026 // 15:16

Security researchers found two ways out of the OpenAI Codex sandbox, one of them capable of running commands on a developer’s machine from Codex’s most […]

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Sep 3, 2026 // 00:22

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository’s own Git configuration names a command that the […]

Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

Jul 21, 2026 // 00:16

Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI’s Codex, Google’s Gemini CLI and Antigravity, without attacking […]

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

Jun 1, 2026 // 12:33

Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that’s targeting developers using OpenAI Codex through a legitimate-looking remote web UI. The […]