Researchers escape OpenAI Codex sandbox to run commands on host

Security researchers discovered two sandbox escape vulnerabilities in OpenAI Codex, a coding assistant tool that runs code in a restricted environment (sandbox, a confined area where untrusted code cannot access the wider system). The more critical flaw, called Heapjack, allows an attacker to execute commands on a developer's computer without permission by reading a security token from shared memory and impersonating the trusted system. Both vulnerabilities were reported to OpenAI on August 12 and fixed within eight days.