security_identifier

Overpatch

Named vulnerability in the Codex CLI apply_patch tool, which derived write permissions from the parent directory of each path a patch named and so could grant access far outside the workspace.

Current clusters

product1 publisher

Codex's read-only mode handed a cloned repository command execution on the host

Oren Yomtov of Accomplish found two ways out of the Codex sandbox, both silent and neither stopped by an approval prompt. OpenAI patched them within eight days, and other researchers have found the same design in rival agents.

Publishers:devops.com

Reality

Evidence68
Adoption45
Hype gap−5
Incentives55
Confidence62