aiqbench takeAI Safety

OpenAI Codex suffered from two critical sandbox escape vulnerabilities—Overpatch and Heapjack—that allowed malicious repositories to execute arbitrary commands on local systems without user consent. The Overpatch flaw exploited directory path manipulation in the apply_patch tool to breach file-write restrictions, while Heapjack compromised the node_repl environment within Codex Desk. These incidents underscore the urgent need for robust isolation mechanisms in AI agents that interact with untrusted codebases to prevent lateral movement from sandboxed environments to host operating systems.

Sources coveringCybersecurity News, InfoQ

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems

Cybersecurity NewsSeptember 21, 20264 min read

OpenAI Codex recently faced two significant security vulnerabilities that allowed malicious repositories to potentially execute commands on a developer’s local system. These vulnerabilities, identified as Overpatch and Heapjack, were reported to OpenAI on August 12, 2026, and were addressed in under a week. The more critical issue, Heapjack, emerged when a developer accessed an attacker-controlled […] The post OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems appeared first on Cyber Security News.

OpenAI Codex recently faced two significant security vulnerabilities that allowed malicious repositories to potentially execute commands on a developer’s local system. These vulnerabilities, identified as Overpatch and Heapjack, were reported to OpenAI on August 12, 2026, and were addressed in under a week. The more critical issue, Heapjack, emerged when a developer accessed an attacker-controlled repository in Codex and queried the agent about its…

Excerpt shown under the publisher's RSS terms · 64 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article