Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both.
Heapjack e Overpatch aggiravano l'isolamento di OpenAI Codex arrivando al sistema host: le due falle sono state segnalate e ...
OpenAI fixed two Codex sandbox escape vulnerabilities after researchers showed how malicious code could bypass key security restrictions.
Pesquisadores revelam falhas no OpenAI Codex que permitem escapar do sandbox e executar comandos no PC. Veja como funcionam e ...
Due vulnerabilità permettevano di aggirare la sandbox di Codex. OpenAI le ha corrette con aggiornamenti per Desktop e CLI.
"BragJack" has been released, a method for hijacking AI assistants running within browsers—such as Chrome, Edge, Perplexity ...
Zwei Wege aus der Codex-Sandbox: Heapjack liest das Token aus dem geteilten Speicher, Overpatch weitet die Schreibrechte.
Chrome、Edge、Perplexity Comet、Opera Neon、Claude in Chromeなど、ブラウザ内で動くAI Assistantを悪意あるExtensionから乗っ取る「BragJack」が公開されました。OpenAI Codexでは、最も制限の厳しいRead-only ModeからでもHost側でCommand Executionへ到達できるSandbox Esca ...