product1 publisher
Codex's read-only mode handed a cloned repository command execution on the host
Oren Yomtov of Accomplish found two ways out of the Codex sandbox, both silent and neither stopped by an approval prompt. OpenAI patched them within eight days, and other researchers have found the same design in rival agents.
Publishers:devops.com
Reality
- Evidence68
- Adoption45
- Hype gap−5
- Incentives55
- Confidence62