macOS Codex leaks ChatGPT history by bypassing TCC permissions
mer__edith · x · 2026-08-24
Highlights a security and privacy vulnerability in the macOS version of Codex. Although macOS's TCC mechanism should prevent direct access to Messages contents, Codex stores its history in /Users/$USER/.codex/sessions, allowing users to access sensitive content generated by ChatGPT. This reflects deeper security issues in the current Agent hype, where connecting disparate services threatens to break the barrier between the application layer and the OS layer.
More from coding & agent
- YC F26's Praxis launches AI agents to run law firm ops end to end — ycombinator · 2026-10-16
- Codex's year-long rise: 40M+ weekly users and its leader now runs all of OpenAI's core products — danshipper · 2026-10-16
- Developer builds inter-agent messaging for his AI agents — complete with message undo — baditaflorin · 2026-10-16
- How Codex Happened: inside OpenAI's comeback in coding — danshipper · 2026-10-16
- iOS 'dots' workflow: one Siri command turns screenshots into a background shopping and saving agent — nickbaumann_ · 2026-10-16
- Your widget tree is already a list of options: where Jev fits in Flutter — rseroter · 2026-10-16