Security1 hSeptember 25, 2026, 07:20

Codex Desktop flaw let untrusted code read auth tokens from shared memory

Researchers detailed a second Codex sandbox escape: untrusted code read authentication tokens from memory shared with the bundled Node.js tool and forged requests to external native programs. The issue was fixed in Codex Desktop 26.818.21641, while the first flaw was patched in Codex CLI 0.149.0.

DEV Community

Open source

Codex Desktop flaw let untrusted code read auth tokens from shared memory

Untrusted code read auth tokens from shared Node.js process memory
The path triggered even in strict read-only mode with no user approval
Fixed in Codex Desktop 26.818.21641 and Codex CLI 0.149.0
Both flaws were reported to OpenAI on August 12, 2026

#OpenAI#Codex

ZoomEye: 9,112 Indexed Kafka Endpoints vs 1,377,501 Services on Port 9092

Security

Hackers Claim Theft of FBI Data With Employee Home Addresses

Security

Better face recognition exposes limits of image quality scores

Security

Codex Desktop flaw let untrusted code read auth tokens from shared memory

ZoomEye: 9,112 Indexed Kafka Endpoints vs 1,377,501 Services on Port 9092

Hackers Claim Theft of FBI Data With Employee Home Addresses

Better face recognition exposes limits of image quality scores

Plugin4Shell flaw hits Claude Code, Codex, Gemini CLI and Copilot