ESCAPING THE OPENAI CODEX SANDBOX, TWICE

Summary from the TLDR Dev newsletter

Two disclosed Codex sandbox escapes crossed different trust boundaries: one widened patch write permissions, while another recovered a trusted token from a shared JavaScript heap to reach an unsandboxed parent process. Both were fixed within eight days, and the broader lesson is to keep enforcement and real credentials outside the environment being constrained.