Assistants/OpenAI Codex CLI

OpenAI Codex CLI

OpenAI · cli agent · paid

Lightweight coding agent that runs in your terminal (Codex CLI).

agentcliopenaicodex

Is this coverage useful?

Helps prioritize which assistants and sources we maintain. Anonymous · one vote per visitor.

Config files OpenAI Codex CLI has changed

Config you own — hooks, permission rules, MCP servers, settings — that releases below state a change to. Counted from the release notes we track, newest change first. How a harness is layered.

skills and plugins3 changes · 9 releases touched it · latest Sep 29, 2026 · rust-v0.159.0 ↗

agent context files3 changes · latest Oct 15, 2026 · rust-v0.163.0 ↗

MCP server config2 changes · 16 releases touched it · latest Sep 9, 2026 · rust-v0.154.0 ↗

permission rules2 changes · 6 releases touched it · latest Oct 15, 2026 · rust-v0.163.0 ↗

hooks1 change · 6 releases touched it · latest Oct 15, 2026 · rust-v0.163.0 ↗

sandbox settings1 change · 6 releases touched it · latest Aug 7, 2026 · rust-v0.147.0 ↗

Security advisories

2 published for Codex CLI, from the GitHub Advisory Database.

Am I exposed? Your Codex CLI version

CriticalOpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files
Affects up to 0.23.0 · CVE-2025-61260 · Apr 14, 2026
HighCodex has sandbox bypass due to bug in path configuration logic
Fixed in 0.39.0 · CVE-2025-59532 · Sep 19, 2025

Release signals

OpenAI Codex CLIrust-v0.165.0-alpha.1Oct 23, 2026

alpha.1

Release 0.165.0-alpha.1Primary source ↗

OpenAI Codex CLIrust-v0.164.0Oct 23, 2026

Save reusable prompts and slash commands in ten numbered `/presets` slots, with a keyboard menu for quick access. (#54380, #54381)

Set model, reasoning effort, speed, and permission profiles directly with inline `/model` and `/permissions` arguments. (#54378, #54383)
Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics. (#54216)
Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)
+137 more changes

Read the full release note

New Features

Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. (#54380, #54381)
Set model, reasoning effort, speed, and permission profiles directly with inline /model and /permissions arguments. (#54378, #54383)
Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics. (#54216)
Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)
Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers. (#54309, #54432, #56049)
The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected. (#56033, #56023)

Bug Fixes

Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking. (#53932, #55581)

Excerpt ends here — this release continues at the source ↗.

Primary source ↗

OpenAI Codex CLIrust-v0.164.0-alpha.11.1Oct 23, 2026