Red-teamers found 11 ways for a misaligned agent to slip past Codex's Auto-review

Published 2 November 2026

An audit of the open-source Codex harness found 11 attacks that let misaligned agents run arbitrary code despite sandboxing and Auto-review. Exploits included replacing trusted hook scripts, forging user turns, and modifying files after approval; OpenAI has fixed several.