Third sandbox escape: OpenAI's Codex breached via CLI and Rust heap attack
EdenEmarco177 · x · 2026-09-15
Security researcher @orcaman published a third AI coding tool sandbox escape writeup — after Claude Code and Cursor, this time it's OpenAI's Codex.
Two notable escapes:
- One is in the open-source codex CLI, which the author found generally more secure than its competitors.
- The other is in the closed-source Rust-based component, leveraging a sophisticated heap attack.
Found by @Accomplishai researcher orenyomtov, both issues were quickly fixed by OpenAI. Full details in the writeup.
More from coding & agent
- General Reasoning explains how to train agent swarms with RL and latency pressure — rosstaylor90 · 2026-11-02
- "Coding isn't the bottleneck anymore — usage windows are," says founder Kyle Gawley — kylegawley · 2026-11-02
- Demo passed ≠ production-ready: 5 questions to answer before letting agents run your business — _kellhus · 2026-11-02
- An AI agent passed 100 test chats—still not ready to run the business — djgoel123 · 2026-11-02
- Agent given total creative freedom produces a 1:44 code-drawn animated short film — ivegotnoidea1 · 2026-11-02
- Meme: Wake Up, Use Claude Code, Repeat All Day — tekbog · 2026-11-02