GHSA-8FFR-XGWF-XJ56 vulnerabilities

Vulnerabilities for packages: codex, zed, pixi...

CVE-2026-18140 vulnerabilities

Vulnerabilities for packages: codex, zed, pixi...

CVE-2026-18140 vulnerabilities

Vulnerabilities for packages: zed, pixi, codex...

GHSA-8FFR-XGWF-XJ56 vulnerabilities

Vulnerabilities for packages: zed, pixi, codex...

Blocking at the Boundary: Auditing Long-Horizon Agents against Staged Prompt Injection

Long-horizon agents consume external content, invoke tools, and modify persistent state. Indirect prompt injection can exploit task-specific context, propagate across causally connected stages, and alter a consequential action while the workflow continues; we term this staged prompt injection. We...

openai-codex-0.158.0-1.1 on GA media (moderate)

openai-codex-0.158.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11923-1 Rating: moderate Cross-References: CVE-2026-91986 CVE-2026-93657 CVSS scores: CVE-2026-91986 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2026-91986 SUSE : 5.3...

PT-2026-105632

These are all security issues fixed in the openai-codex-0.158.0-1.1 package on the GA media of openSUSE Tumbleweed...

Practical Secrets Extraction against Black-Box LLMs

Large language models LLMs increasingly power autonomous coding agents such as Codex and Claude Code, yet their training corpora may contain confidential credentials exposed in public repositories or collected from private development artifacts, creating risks of memorization and subsequent...

OPENSUSE-SU-2026:11923-1 openai-codex-0.158.0-1.1 on GA media

These are all security issues fixed in the openai-codex-0.158.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-102343

Name of the Vulnerable Software and Affected Versions Codex app versions prior to 26.924.20706 Description Security fixes were implemented for the macOS version of the application to address a security flaw. Recommendations Update Codex app to version 26.924.20706...

CVE-2026-100586

OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes...

CVE-2026-100587

OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and...

CVE-2026-100552

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

CVE-2026-100587

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass in the Codex computer-use installation command . The flaw occurs because the system fails to properly validate owner authorization, allowing non-owner channel senders to install arbitrary plugins and execute MCP proc...

CVE-2026-100586 OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind

OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes...

EUVD-2026-87465

OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes...

CVE-2026-100586 OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind

OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes...

CVE-2026-100586

Versions of OpenClaw Codex prior to 2026.7.1 are vulnerable to an authorization bypass when creating native conversation bindings. The root cause is a failure to properly enforce owner authorization, allowing non-owner channel senders with command access to create bindings to the native Codex run...

CVE-2026-100587

OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and...

CVE-2026-100586

OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes...