Tools
Codex closes a Windows sandbox gap that let another logon session on the same account touch sandboxed processes
openai/codex #47361 (merged 2026-09-22) restricts the Windows sandbox token's default DACL to the runner's logon SID, removing grants to Everyone and capability SIDs. It also adds an OWNER RIGHTS entry that strips the owner's implicit WRITE_DAC. A new AccessCheck regression test confirms that a simulated second logon with the same owner can no longer read process memory, create threads or rewrite DACLs. This matters for anyone running Codex on shared Windows build machines.
Source
↳ Follow the thread