ZDI-26-305
HIGH 8.6
Published
Apr 28, 2026
OpenAI Codex Sandbox Escape Vulnerability
OpenAI
This vulnerability allows remote attackers to bypass the sandbox on affected installations of OpenAI Codex. User interaction is required to exploit this vulnerability in that the target must use Codex to process a repository containing malicious JavaScript. The ZDI has assigned a CVSS rating of 8.6.