Preliminary research
Escaping the OpenAI Codex sandbox, twice
AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.
Two Codex sandbox escapes abused enforcement plumbing. One widened patch-derived write grants and crossed a symlink; the other recovered a trust token from a V8 heap shared with untrusted code and forged requests to an unsandboxed native parent.
Record
- Researcher
- Oren Yomtov
- Published by
- Accomplish
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Oren Yomtov, first published at the original source. Preserved copies are kept so the citation survives its host.