cybersecurity risk
Resolved 💬 3 comments Opened May 22, 2026 by yu1101610062 Closed May 24, 2026
What version of Codex CLI is running?
0.132.0
What subscription do you have?
pro
Which model were you using?
gpt-5.5
What platform is your computer?
Darwin 25.3.0 arm64 arm
What terminal emulator and version are you using (if applicable)?
zsh
Codex doctor report
{
"schemaVersion": 1,
"generatedAt": "1779418043s since unix epoch",
"overallStatus": "ok",
"codexVersion": "0.132.0",
"checks": {
"app_server.status": {
"id": "app_server.status",
"category": "app-server",
"status": "ok",
"summary": "background server is not running",
"details": {
"control socket": "/Users/yyzy/.codex/app-server-control/app-server-control.sock",
"daemon state dir": "/Users/yyzy/.codex/app-server-daemon",
"mode": "ephemeral",
"pid file": "/Users/yyzy/.codex/app-server-daemon/app-server.pid (missing)",
"settings": "/Users/yyzy/.codex/app-server-daemon/settings.json (missing)",
"status": "not running",
"update-loop pid file": "/Users/yyzy/.codex/app-server-daemon/app-server-updater.pid (missing)"
},
"remediation": null,
"durationMs": 0
},
"auth.credentials": {
"id": "auth.credentials",
"category": "auth",
"status": "ok",
"summary": "auth is configured",
"details": {
"auth file": "/Users/yyzy/.codex/auth.json",
"auth storage mode": "File",
"stored API key": "false",
"stored ChatGPT tokens": "true",
"stored agent identity": "false",
"stored auth mode": "chatgpt"
},
"remediation": null,
"durationMs": 0
},
"config.load": {
"id": "config.load",
"category": "config",
"status": "ok",
"summary": "config loaded",
"details": {
"CODEX_HOME": "/Users/yyzy/.codex",
"config.toml": "/Users/yyzy/.codex/config.toml",
"config.toml parse": "ok",
"cwd": "/Users/yyzy",
"enabled feature flags": "shell_tool, unified_exec, shell_snapshot, terminal_resize_reflow, sqlite, memories, hooks, enable_request_compression, network_proxy, multi_agent, apps, tool_search, tool_suggest, plugins, plugin_hooks, in_app_browser, browser_use, browser_use_external, computer_use, plugin_sharing, external_migration, image_generation, skill_mcp_dependency_install, mentions_v2, steer, guardian_approval, goals, collaboration_modes, tool_call_mcp_elicitation, personality, fast_mode, tui_app_server, prevent_idle_sleep, workspace_dependencies",
"feature flag overrides": "memories=true, network_proxy=true, external_migration=true, mentions_v2=true, goals=true, prevent_idle_sleep=true",
"feature flags enabled": "34",
"log dir": "/Users/yyzy/.codex/log",
"mcp servers": "0",
"model": "gpt-5.5",
"model provider": "openai",
"sqlite home": "/Users/yyzy/.codex"
},
"remediation": null,
"durationMs": 0
},
"installation": {
"id": "installation",
"category": "install",
"status": "ok",
"summary": "installation looks consistent",
"details": {
"PATH codex #1": "/opt/homebrew/bin/codex",
"PATH codex #2": "/usr/local/bin/codex",
"PATH codex entries": "2",
"current executable": "/opt/homebrew/lib/node_modules/@openai/codex/node_modules/@openai/codex-darwin-arm64/vendor/aarch64-apple-darwin/codex/codex",
"install context": "npm",
"managed by bun": "false",
"managed by npm": "true",
"managed package root": "/opt/homebrew/lib/node_modules/@openai/codex",
"npm update target": "/opt/homebrew/lib/node_modules/@openai/codex"
},
"remediation": null,
"durationMs": 138
},
"mcp.config": {
"id": "mcp.config",
"category": "mcp",
"status": "ok",
"summary": "no MCP servers configured",
"details": {},
"remediation": null,
"durationMs": 0
},
"network.env": {
"id": "network.env",
"category": "network",
"status": "ok",
"summary": "network-related environment looks readable",
"details": {
"proxy env vars": "none"
},
"remediation": null,
"durationMs": 0
},
"network.provider_reachability": {
"id": "network.provider_reachability",
"category": "reachability",
"status": "ok",
"summary": "active provider endpoints are reachable over HTTP",
"details": {
"ChatGPT base URL": "https://chatgpt.com/backend-api/ reachable (HTTP 403)",
"reachability mode": "ChatGPT auth"
},
"remediation": null,
"durationMs": 702
},
"network.websocket_reachability": {
"id": "network.websocket_reachability",
"category": "websocket",
"status": "ok",
"summary": "Responses WebSocket handshake succeeded",
"details": {
"DNS": "1 IPv4, 0 IPv6, first IPv4",
"auth mode": "chatgpt",
"connect timeout": "15000 ms",
"endpoint": "wss://chatgpt.com/backend-api/<redacted>",
"handshake result": "HTTP 101 Switching Protocols",
"model provider": "openai",
"models etag present": "true",
"provider name": "OpenAI",
"proxy env vars": "none",
"reasoning header": "false",
"server model present": "false",
"supports websockets": "true",
"wire API": "responses"
},
"remediation": null,
"durationMs": 1186
},
"runtime.provenance": {
"id": "runtime.provenance",
"category": "runtime",
"status": "ok",
"summary": "running npm on macos-aarch64",
"details": {
"commit": "unknown",
"current executable": "/opt/homebrew/lib/node_modules/@openai/codex/node_modules/@openai/codex-darwin-arm64/vendor/aarch64-apple-darwin/codex/codex",
"install method": "npm",
"platform": "macos-aarch64",
"version": "0.132.0"
},
"remediation": null,
"durationMs": 0
},
"runtime.search": {
"id": "runtime.search",
"category": "search",
"status": "ok",
"summary": "search is OK (system)",
"details": {
"search command": "rg",
"search command readiness": "ripgrep 15.1.0 (rev af60c2de9d)",
"search provider": "system"
},
"remediation": null,
"durationMs": 11
},
"sandbox.helpers": {
"id": "sandbox.helpers",
"category": "sandbox",
"status": "ok",
"summary": "sandbox configuration is readable",
"details": {
"approval policy": "Never",
"codex-linux-sandbox helper": "none",
"execve wrapper helper": "/Users/yyzy/.codex/tmp/arg0/codex-arg0VIjF3F/codex-execve-wrapper",
"filesystem sandbox": "unrestricted",
"network sandbox": "enabled"
},
"remediation": null,
"durationMs": 0
},
"state.paths": {
"id": "state.paths",
"category": "state",
"status": "ok",
"summary": "state paths and databases are inspectable",
"details": {
"CODEX_HOME": "/Users/yyzy/.codex (dir)",
"active rollout files": "1707 files, 1483453896 total bytes, 869041 average bytes",
"archived rollout files": "38 files, 1838709114 total bytes, 48387081 average bytes",
"log DB": "/Users/yyzy/.codex/logs_2.sqlite (file)",
"log DB integrity": "ok",
"log dir": "/Users/yyzy/.codex/log (dir)",
"sqlite home": "/Users/yyzy/.codex (dir)",
"state DB": "/Users/yyzy/.codex/state_5.sqlite (file)",
"state DB integrity": "ok"
},
"remediation": null,
"durationMs": 4374
},
"terminal.env": {
"id": "terminal.env",
"category": "terminal",
"status": "ok",
"summary": "terminal metadata was detected",
"details": {
"COLORTERM": "truecolor",
"DISPLAY": "present",
"TERM_PROGRAM": "Apple_Terminal",
"color output": "enabled",
"effective locale": "zh_CN.UTF-8",
"stderr is terminal": "true",
"stdin is terminal": "true",
"stdout is terminal": "true",
"terminal": "Apple Terminal",
"terminal size": "80x24",
"terminal version": "466"
},
"remediation": null,
"durationMs": 0
},
"updates.status": {
"id": "updates.status",
"category": "updates",
"status": "ok",
"summary": "update configuration is locally consistent",
"details": {
"cached latest version": "0.132.0",
"check for update on startup": "true",
"dismissed version": "0.86.0",
"last checked at": "2026-05-21T08:48:46.055538Z",
"latest version": "0.133.0",
"latest version status": "newer version is available",
"npm update target": "/opt/homebrew/lib/node_modules/@openai/codex",
"update action": "npm install -g @openai/codex",
"version cache": "/Users/yyzy/.codex/version.json"
},
"remediation": null,
"durationMs": 1047
}
}
}What issue are you seeing?
I'm maintaining a remote Kubernetes cluster via SSH, and CodeX is frequently triggering cyber risk alerts:
This content was flagged for possible cybersecurity risk. If this seems wrong, try rephrasing your request. To get authorized for security work, join the Trusted Access for Cyber program: https://chatgpt.com/cyber
and interrupting the process.
Additionally, a prompt appears with every conversation, even if I only type "hello":
Your conversations have multiple flags for possible cybersecurity risk. Responses may take longer because extra security checks
are on. To get authorized for security work, join the Trusted Access for Cyber program: https://chatgpt.com/cyber
What steps can reproduce the bug?
This content was flagged for possible cybersecurity risk.
019e3f86-7ce9-7232-9a14-67b77fed157a
Your conversations have multiple flags for possible cybersecurity risk.
every conversation
What is the expected behavior?
Without any warnings, my work is not interrupted and my response time is not slowed down.
Additional information
My Pro subscription account: yu1101610062us@gmail.com
I don't want my issue to be closed without my problem being resolved.
This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗