Assistants/OpenAI Codex CLI

OpenAI Codex CLI

OpenAI · cli agent · paid

Lightweight coding agent that runs in your terminal (Codex CLI).

agentcliopenaicodex

Is this coverage useful?

Helps prioritize which assistants and sources we maintain. Anonymous · one vote per visitor.

Config files OpenAI Codex CLI has changed

Config you own — hooks, permission rules, MCP servers, settings — that releases below state a change to. Counted from the release notes we track, newest change first. How a harness is layered.

skills and plugins3 changes · 9 releases touched it · latest Sep 29, 2026 · rust-v0.159.0 ↗

agent context files3 changes · latest Oct 15, 2026 · rust-v0.163.0 ↗

MCP server config2 changes · 16 releases touched it · latest Sep 9, 2026 · rust-v0.154.0 ↗

permission rules2 changes · 6 releases touched it · latest Oct 15, 2026 · rust-v0.163.0 ↗

hooks1 change · 6 releases touched it · latest Oct 15, 2026 · rust-v0.163.0 ↗

sandbox settings1 change · 6 releases touched it · latest Aug 7, 2026 · rust-v0.147.0 ↗

Security advisories

2 published for Codex CLI, from the GitHub Advisory Database.

Am I exposed? Your Codex CLI version

CriticalOpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files
Affects up to 0.23.0 · CVE-2025-61260 · Apr 14, 2026
HighCodex has sandbox bypass due to bug in path configuration logic
Fixed in 0.39.0 · CVE-2025-59532 · Sep 19, 2025

Release signals

OpenAI Codex CLIrust-v0.145.0-alpha.25Jul 20, 2026

alpha.25

Release 0.145.0-alpha.25Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.24Jul 18, 2026

alpha.24

Release 0.145.0-alpha.24Primary source ↗

OpenAI Codex CLIrust-v0.144.6Jul 18, 2026

Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009)

#33972 Backport refreshed bundled model metadata to 0.144 @sayan-oai
#34009 Narrow 0.144 hotfix to GPT-5.6 prompts and context @sayan-oai

Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.23Jul 17, 2026

alpha.23

Release 0.145.0-alpha.23Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.22Jul 17, 2026

alpha.22

Release 0.145.0-alpha.22Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.20Jul 17, 2026

alpha.20

Release 0.145.0-alpha.20Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.19Jul 16, 2026

alpha.19

Release 0.145.0-alpha.19Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.18Jul 16, 2026

alpha.18

Release 0.145.0-alpha.18Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.16Jul 16, 2026

alpha.16

Release 0.145.0-alpha.16Primary source ↗

OpenAI Codex CLIrust-v0.144.5Jul 16, 2026

Improved dangerous-command detection, including more forced `rm` forms, and provides clearer rejection reasons when commands are denied. (#33455)

#33455 [release/0.144] fix(core) expand is_dangerous_command @dylan-hurd-oai

Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.15Jul 16, 2026

alpha.15

Release 0.145.0-alpha.15Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.14Jul 15, 2026

alpha.14

Release 0.145.0-alpha.14Primary source ↗

OpenAI Codex CLIrust-v0.145.0-alpha.13Jul 15, 2026

alpha.13

Release 0.145.0-alpha.13Primary source ↗

Polled sources

[openai-developers] OpenAI Developers Codex

Product page · not polled

https://developers.openai.com/codex

[github-releases] GitHub Releases

GitHub Releases · last read Oct 24, 2026

https://github.com/openai/codex/releases