Config files OpenAI Codex CLI has changed
Config you own — hooks, permission rules, MCP servers, settings — that releases below state a change to. Counted from the release notes we track, newest change first. How a harness is layered.
Security advisories
2 published for Codex CLI, from the GitHub Advisory Database.
Affects up to 0.23.0 · CVE-2025-61260 · Apr 14, 2026
Fixed in 0.39.0 · CVE-2025-59532 · Sep 19, 2025
Release signals
alpha.18.1
Release 0.162.0-alpha.18.1Primary source ↗alpha.20
Release 0.162.0-alpha.20Primary source ↗alpha.17.1
Release 0.162.0-alpha.17.1Primary source ↗GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
- Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models;
- Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
- Sign in to MCP servers from an active terminal session with `/mcp login <name>`. (#49290)
- Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
- +137 more changes
Read the full release noteHide the full release note
New Features
-
GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
-
Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
-
Sign in to MCP servers from an active terminal session with
/mcp login <name>. (#49290) -
Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
-
Daybreak is opt-in through
--enable cli_daybreakorfeatures.cli_daybreak=true;daybreak=truealone is insufficient. By default, controls and indicators are hidden,/daybreakis unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207) -
Select a Cyber access program per turn with
codex exec --cyber-access-programor the TypeScript SDK’scyberAccessProgramoption. The explicit exec override remains available withcli_daybreakdisabled and leaves the saved choice
Excerpt ends here — this release continues at the source ↗.
alpha.18
Release 0.162.0-alpha.18Primary source ↗alpha.17
Release 0.162.0-alpha.17Primary source ↗alpha.13.1
Release 0.161.0-alpha.13.1Primary source ↗alpha.16
Release 0.162.0-alpha.16Primary source ↗Preserve `SYSTEMROOT`, `TEMP`, and `TMP` when launching remote stdio MCP servers with explicitly configured remote environment variables, allowing Unix hosts to retain the Windows executor's startup environment.
- [#51121](https://github.com/openai/codex/pull/51121): Backport Windows remote MCP environment preservation to 0.160.
alpha.15
Release 0.162.0-alpha.15Primary source ↗alpha.14
Release 0.162.0-alpha.14Primary source ↗alpha.13
Release 0.162.0-alpha.13Primary source ↗alpha.12
Release 0.162.0-alpha.12Primary source ↗alpha.11
Release 0.162.0-alpha.11Primary source ↗Polled sources
[openai-developers] OpenAI Developers Codex
Product page · not polled
https://developers.openai.com/codex[github-releases] GitHub Releases
GitHub Releases · last read Oct 24, 2026
https://github.com/openai/codex/releases