TLDR Tech / Dev
Escaping the OpenAI Codex sandbox, twice
Two disclosed Codex sandbox escapes crossed different trust boundaries: one widened patch write permissions, while another recovered a trusted token from a shared JavaScript heap to reach an unsandboxed parent process. Both were fixed within eight days, and the broader lesson is to keep enforcement and real credentials outside the environment being constrained.
Read the full story