[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f46TPIhzYGxzOaZ-Ma3FTdRIdY83RabeC7wWoLBl7EfA":3},{"article":4,"iocs":37,"watch_terms":42,"solutions":43,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"0d120cd6-b97e-4f2d-92df-0bb540ca6e52","Critical Vulnerability in OpenAI Codex Allowed GitHub Token Compromise","critical-vulnerability-in-openai-codex-allowed-github-token-compromise","Researchers found an OpenAI Codex vulnerability that could have been exploited to compromise GitHub tokens. The post Critical Vulnerability in OpenAI Codex Allowed GitHub Token Compromise appeared first on SecurityWeek.","Researchers at BeyondTrust discovered a critical vulnerability in OpenAI Codex stemming from improper input sanitization in GitHub branch name processing. Attackers could inject arbitrary commands through branch names to execute malicious payloads, retrieve OAuth tokens, and potentially compromise multiple organizations sharing GitHub repositories. OpenAI patched the vulnerability in late December 2025 after responsible disclosure, but the research highlights expanding attack surfaces as AI agents gain access to sensitive credentials.","OpenAI Codex vulnerability allowed extraction of GitHub OAuth tokens via branch name injection.","https:\u002F\u002Fwww.securityweek.com\u002Fcritical-vulnerability-in-openai-codex-allowed-github-token-compromise\u002F",null,"2026-03-31T06:35:48+00:00","2026-03-31T08:00:15.987559+00:00",9,[],"80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":17,"icon":12,"name":19,"slug":20},"Vulnerabilities","vulnerabilities",[22,27,32],{"category":23},{"id":24,"icon":12,"name":25,"slug":26},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":28},{"id":29,"icon":12,"name":30,"slug":31},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":33},{"id":34,"icon":12,"name":35,"slug":36},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[38],{"type":39,"value":40,"context":41},"malware","OpenAI Codex command injection payload (obfuscated Unicode characters)","Malicious payload technique using Unicode character obfuscation to execute commands and extract OAuth tokens without UI visibility",[],{"controls":44,"vendors":125},[45,74,103],{"slug":46,"name":47,"problem":48,"products":49},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"slug":75,"name":76,"problem":77,"products":78},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"slug":36,"name":104,"problem":105,"products":106},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[107,115,120],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":116,"product_name":117,"url":118,"description":119},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":121,"product_name":122,"url":123,"description":124},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",[126],{"slug":127,"name":128,"logo_path":129,"roles":130},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png",[131],"reported_by",{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":142},"ai-code-analysis-tool-vulnerability-exposes-github-tokens-through-input-injection","AI Code Analysis Tool Vulnerability Exposes GitHub Tokens Through Input Injection","A critical vulnerability in OpenAI Codex demonstrated how improper input sanitization in AI-powered development tools can lead to credential compromise. Attackers exploited inadequate validation of GitHub branch names to inject malicious commands that could steal OAuth tokens and access sensitive repositories. This incident highlights the expanding attack surface created when AI agents are granted access to authentication credentials and development environments. Organizations using AI-assisted coding tools must treat them as high-risk applications requiring strict input validation and credential management controls.",[137,138,139,140,141],"CIS Control 7.1","CIS Control 6.1","NIST SC-3","NIST AC-6","OWASP ASVS 5.3",{}]