{"data":{"id":"b1a8233b-7973-460b-ac06-1993b6d4e7a1","title":"How we use /goal to find bugs in Patch the Planet","summary":"Researchers used Codex's /goal feature (a tool that lets AI work toward open-ended objectives) to find bugs in widely-used open-source projects like Rust and curl as part of Patch the Planet, an initiative with OpenAI. They discovered that effective bug hunting with /goal requires treating prompts as success criteria rather than instructions, and found that letting Codex itself draft the goal prompts—including red-teaming them to spot potential shortcuts—produced better results than writing goals manually.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://blog.trailofbits.com/2026/07/28/how-we-use-goal-to-find-bugs-in-patch-the-planet/","publishedAt":"2026-07-28T11:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI","Codex"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-28T11:00:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null}}