Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both.

So: go look at OfoxAI if your drawer of API keys is starting to look like mine did. Change one environment variable. Run one ...