Codex Knowledge Base
SymJack: The Symlink Hijack That Turns Approval Prompts into Lies — and How Codex CLI's Defence Stack Responds
Adversa AI's SymJack attack exploits a TOCTOU flaw in approval prompts to overwrite agent configuration via disguised symlinks. Six major coding agents confirmed vulnerable. Here is how the attack works...
The MCP Tax: When Shell Commands Beat MCP Servers in Codex CLI Workflows
The MCP Tax: When Shell Commands Beat MCP Servers in Codex CLI Workflows
The MCP stdio Pipe-Buffer Deadlock: Diagnosing, Preventing, and Recovering from the Most Common MCP Server Failure in Codex CLI
The MCP stdio Pipe-Buffer Deadlock: Diagnosing, Preventing, and Recovering from the Most Common MCP Server Failure in Codex CLI
MCP Dev Summit Bengaluru: Five Production Patterns Every Codex CLI Developer Should Know
MCP Dev Summit Bengaluru: Five Production Patterns Every Codex CLI Developer Should Know
MCP Ambient Authority and the NSA's Wake-Up Call: Agent Identity, Intent-Aware Access Control, and Codex CLI's Authorisation Defence Stack
MCP Ambient Authority and the NSA’s Wake-Up Call: Agent Identity, Intent-Aware Access Control, and Codex CLI’s Authorisation Defence Stack
The MCP 2026-07-28 Release Candidate: What the Stateless Protocol, Extensions, and Tasks Mean for Codex CLI Developers
The MCP 2026-07-28 Release Candidate: What the Stateless Protocol, Extensions, and Tasks Mean for Codex CLI Developers
eBPF Runtime Observability for Codex CLI: AgentSight, Tetragon, and Kernel-Level Agent Monitoring
eBPF Runtime Observability for Codex CLI: AgentSight, Tetragon, and Kernel-Level Agent Monitoring
Codex CLI Verification Patterns: Seven Strategies for Ensuring Agent-Generated Code Actually Works
Codex CLI Verification Patterns: Seven Strategies for Ensuring Agent-Generated Code Actually Works
Codex CLI v0.139: Code-Mode Web Search, MCP Schema Fidelity, and the Fixes That Compound
Codex CLI v0.139: Code-Mode Web Search, MCP Schema Fidelity, and the Fixes That Compound
Codex CLI v0.138: Desktop Handoff, Enterprise Access Tokens, and the Performance Gains That Actually Matter
Codex CLI v0.138: Desktop Handoff, Enterprise Access Tokens, and the Performance Gains That Actually Matter