False positive cyber-safety rerouting (GPT-5.3-Codex → GPT-5.2 fallback)
What version of Codex CLI is running?
0.103.0
What subscription do you have?
Pro
Which model were you using?
gpt-5.2
What platform is your computer?
Darwin 25.1.0 arm64 arm
What terminal emulator and version are you using (if applicable)?
Cursor
What issue are you seeing?
When I started the Codex CLI and ran the specification revision task, the following warning appeared:
"warning: Your account was flagged for potentially high-risk cyber activity and this request was routed to gpt-5.2 as a fallback. To regain access to gpt-5.3-codex, apply for trusted access: https://chatgpt.com/cyber or learn more: https://developers.openai.com/codex/concepts/cyber-safety"
- This occurred at: 2026-02-18 JST
- Configured model / expected model: gpt-5.2 (not gpt-5.3-codex)
What steps can reproduce the bug?
When I start the codex CLI and execute any task, I see the following message: "warning: Your account was flagged for potentially high-risk cyber activity and this request was routed to gpt-5.2 as a fallback. To regain access to gpt-5.3-codex, apply for trusted access: https://chatgpt.com/cyber or learn more: https://developers.openai.com/codex/concepts/cyber-safety".
What is the expected behavior?
_No response_
Additional information
- I do not have a driver’s license or passport, so I am unable to go through the recovery process at https://chatgpt.com/cyber and am at a loss. (I do have a My Number Card issued in Japan.)
- thread ID:019c6e09-d623-7c63-9da4-ed47e7ed0339
5 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
did you fix the issue? i wonder how i can fix it ! thanks
https://github.com/openai/codex/issues/12065#issuecomment-3917998868
I tried these steps and it appears to have resolved the issue.
You can use the command in this gist to check whether your requests are being routed to GPT-5.2:
https://gist.github.com/banteg/0ea5484d58e80b8223fcba64bd0d29db
I confirmed that it outputs “gpt-5.3-codex.” However, in 0.103.0 (and 0.102.0), no matter which model I select, I still see a warning indicating routing from gpt-5.3-codex to gpt-5.2.
After updating to 0.104.0, the warning no longer appeared.
Thank you for your prompt response!