Two OpenAI Codex sandbox flaws, Overpatch and Heapjack, could let malicious repositories execute commands on developer systems.

Security researchers found two ways out of the OpenAI Codex sandbox, one of them capable of running commands on a developer's machine from Codex's most locked-down mode, with no approval prompt and ...

Authorized research on OpenAI Codex identified two sandbox flaws — patched within eight days — that reveal a structural gap between alignment thinking and containment engineering in modern AI agents.