Codex
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Security update reported by Trail of BitsTrail of Bits uses Codex to speed up backporting security fixes to stable Linux releases
- Activity reported by GBHackersUnauthorised Codex and Claude Code relay service disables sandboxing at 12 organisations
Recent news
Trail of Bits uses Codex to speed up backporting security fixes to stable Linux releases
Trail of Bits describes using Codex agents to prepare backports of security fixes to stable Linux kernels, Ubuntu LTS and Fedora packages, with human engineers reviewing and submitting patches. By 29 October the project had helped deliver fixes for 149 distinct CVEs into stable kernel releases. The authors argue that thousands of known CVEs remain unfixed in stable branches, including a critical TCP stack flaw that had not reached distribution kernels weeks after upstream patching.
Unauthorised Codex and Claude Code relay service disables sandboxing at 12 organisations
Symantec's Threat Hunter Team identified an unauthorised relay service that installs the genuine OpenAI Codex and Anthropic Claude Code command-line tools and rewrites their configuration to disable sandboxing. It has affected 12 organisations since early 2026, mostly in mainland China. Because these AI coding agents can read files, write code and run commands, removing sandboxing widens what they can do on a host.