Kinnaird McQuade and The Hacker News describe a Codex flaw where malicious branch names could trigger command injection and exfiltrate GitHub tokens, enabling lateral movement and repo read/write access.
We found a critical vulnerability in @OpenAI Codex affecting all Codex users, allowing exfil of a victim’s GitHub tokens to our C2 server.
This granted lateral movement and R/W access to a victim’s entire code base 😈
🔸 Another enabled GitHub token theft via Codex injection
OpenAI Codex vulnerability allowed attackers to steal GitHub tokens via malicious branch names using a hidden Unicode command injection flaw.
The latest from our team, command injection in OpenAI Codex via Github branch names.
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security