Codex

Codex is OpenAI’s coding agent for writing, editing, and running code across a codebase. This page tracks its releases, features, and usage.

Notes

• 2026-09-27 mvschwarz/openrig trending on GitHub (+114 stars): a multi-agent harness that runs Codex and Claude Code side by side as one coordinated system, letting users route or compare work across both instead of picking one. GitHub

• 2026-09-20 AIR Security disclosed Plugin4Shell, a zero-click SHA-pinning bypass affecting Codex’s plugin installer alongside Claude Code, GitHub Copilot, and Gemini CLI: an attacker-controlled plugin repo can swap in malicious code after the commit-SHA pin check passes. OpenAI patched it in Codex 0.146.0; GitHub Copilot remains unpatched and Google opted to deprecate Gemini CLI instead of fixing it. AIR Security (primary) · The Hacker News (independent)

• 2026-09-11 A Russian-speaking threat actor ran hundreds of AI agents built on Codex paired with a DeepSeek model (plus Mimikatz, Certipy, Rubeus, Impacket) to exploit two PaperCut NG/MF CVEs, compromising 440+ servers across 395 organizations in 48 countries; went from empty workspace to code execution in under 4 hours, breaching 11 orgs in 26 seconds once at full speed. The Hacker News · BleepingComputer

• 2026-09-03 Codex CLI v0.153.0: vim mode gets undo/redo (u / Ctrl+R) that preserves drafts and attachments, plus a plugin CLI to list, install, and remove plugins from remote marketplaces. GitHub release (primary)

• 2026-07-24 OpenAI shipped GPT-Live full-duplex voice control for Codex and ChatGPT Work in the desktop app (macOS and Windows). Users can now dispatch and coordinate multiple Codex agents simultaneously by voice while agents run in parallel. Rolling out to Plus, Pro, Business, Edu, and Enterprise plans. OpenAI on X · VentureBeat

• 2026-07-15 OpenAI’s Codex CLI began encrypting the prompts sent to sub-agents, sparking a 408-point HN thread (240 comments) about agentic transparency and what operators can actually audit in automated pipelines. GitHub issue · HN

• 2026-07-15 OpenAI launched the Codex Micro, its first hardware product: a compact programmable macro pad (13 mechanical keys, joystick, rotary encoder, Bluetooth and WiFi) built with boutique keyboard maker Work Louder. Targets Codex’s 5M weekly users who want hardware shortcuts without a context switch. Jony Ive’s AI device is reportedly still delayed. TechStory · DevOps.com

• 2026-06-25 Atlassian added Codex support to Bitbucket Agentic Pipelines; Codex agents can now be triggered by PR comments, merges, schedules, or failing CI builds, following earlier Claude agent support in the same platform. Atlassian

• 2026-06-19 Record & Replay for macOS launched: record a workflow once and Codex converts it into a reusable “skill” via Computer Use; excluded from EEA, UK, and Switzerland at launch. Codex changelog

• 2026-06-11 OCI integration live: Oracle cloud customers can now apply Oracle Universal Credits toward OpenAI models and Codex, routing enterprise procurement through existing Oracle contracts. OpenAI

• 2026-06-06 Hit 5M weekly users. Shipped Codex Sites (build and deploy internal apps from a prompt) and 6 role-specific plugin bundles covering data, sales, design, and banking. VentureBeat