WS-2026-0013

OpenAI Codex CLI: unsafe auto-approval of git commands. The 'safe command' allowlist trusted git subcommands show/diff/log/branch by name only, ignoring arguments, so crafted invocations bypassed the approval/sandbox boundary. Vectors: git show/diff/log --output arbitrary file write;...