ZDI-26-305: (0Day) OpenAI Codex Sandbox Escape Vulnerability
Source Zero Day Initiative
Rated High by Zero Day Initiative
Data as of 26 May 2026, 20:33 UTC
What to do
AI-suggested
The vendor has indicated the vulnerability is not in the default Codex product surface and has not accepted it under their bug bounty program. The primary mitigation is to restrict or avoid interaction with the affected Codex installations, especially avoiding processing untrusted or malicious JavaScript repositories. Monitor vendor advisories for any future updates regarding remediation.
Description
This vulnerability allows remote attackers to bypass the sandbox on affected installations of OpenAI Codex. User interaction is required to exploit this vulnerability in that the target must use Codex to process a repository containing malicious JavaScript. The ZDI has assigned a CVSS rating of 8.6.