
>decode·5 min
Heapjack and Overpatch: Two Codex Sandbox Escapes
Researchers escaped the OpenAI Codex sandbox twice: Heapjack gets unsandboxed RCE from read-only mode; Overpatch lets a patch write anywhere on disk.
codexai-agentssecurity
>read more_
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…

Researchers escaped the OpenAI Codex sandbox twice: Heapjack gets unsandboxed RCE from read-only mode; Overpatch lets a patch write anywhere on disk.

Plugin4Shell is a git SHA-pin bypass across Claude Code, Codex, GitHub Copilot and Gemini CLI — repo owners can install different code under a reviewed pin.

OpenAI field report on eight agent-assisted projects shows coding agents modernize scientific software — verification and stewardship are the new bottleneck.