Skip to main content
ZDI-26-305 HIGH 8.6 Published Apr 28, 2026

OpenAI Codex Sandbox Escape Vulnerability

OpenAI

This vulnerability allows remote attackers to bypass the sandbox on affected installations of OpenAI Codex. User interaction is required to exploit this vulnerability in that the target must use Codex to process a repository containing malicious JavaScript. The ZDI has assigned a CVSS rating of 8.6.

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy