{
  "id": 8942067,
  "title": "Researchers broke out of OpenAI Codex's sandbox — twice",
  "url": "https://urgent.news/2026/09/21/researchers-broke-out-of-openai-codexs-sandbox-twice",
  "topic": "ai",
  "section": "AI",
  "published": "2026-09-21T13:12:50.000Z",
  "source": {
    "name": "Gulf News",
    "slug": "gulf-news",
    "url": "https://gulfnews.com/technology/researchers-broke-out-of-openai-codexs-sandbox-twice-1.500682545"
  },
  "original_language": "en",
  "account": "Two security vulnerabilities, dubbed Heapjack and Overpatch, have been discovered in OpenAI Codex's protective sandbox, allowing researchers to break out of the sandbox twice. Accomplish AI researcher Oren Yomtov revealed the flaws, which were subsequently fixed by OpenAI within eight days of reporting. Heapjack, a JavaScript component in Codex Desktop, enabled exploitation even in read-only mode, while Overpatch manipulated the open-source Codex command-line tool's patching mechanism. Both vulnerabilities stemmed from security controls relying on potentially manipulated information. Codex users are advised to update to Codex Desktop build 26.818.21641 or later, and Codex CLI 0.149.0 or later to mitigate the risks.",
  "summary": "Security researchers found two ways to escape the protective sandbox used by OpenAI’s Codex coding agent, including one that could run commands on a developer’s computer without an approval prompt. The vulnerabilities, named Heapjack and Overpatch, affected different parts of Codex and were discovered by security researcher Oren Yomtov of Accomplish AI. Get updated faster and for FREE: Download…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Arabian Post",
        "title": "Researchers penetrate OpenAI systems with Claude models",
        "url": "https://urgent.news/2026/09/20/researchers-penetrate-openai-systems-with-claude-models",
        "published": "2026-09-20T17:44:04.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}