False-positive cybersecurity block interrupts authorized offline local QA task
Open 💬 3 comments Opened Aug 5, 2026 by jlnieto
💡 Likely answer: A maintainer (github-actions[bot], contributor)
responded on this thread — see the highlighted reply below.
What version of Codex CLI is running?
codex-cli 0.146.0
What subscription do you have?
ChatGPT Pro
Which model were you using?
gpt-5.6-sol
What platform is your computer?
Linux Mint 21.1 (Vera), Linux 5.15.0-186-generic, x86_64
What terminal emulator and version are you using (if applicable)?
GNOME Terminal 3.44.0 (VTE 0.68.0), Bash
Codex doctor report
{
"schemaVersion": 1,
"generatedAt": "1785923890s since unix epoch",
"overallStatus": "warning",
"codexVersion": "0.146.0",
"checks": {
"app_server.status": {
"id": "app_server.status",
"category": "app-server",
"status": "ok",
"summary": "background server is not running",
"details": {
"control socket": "/home/jose/.codex/app-server-control/app-server-control.sock",
"daemon state dir": "/home/jose/.codex/app-server-daemon",
"mode": "ephemeral",
"pid file": "/home/jose/.codex/app-server-daemon/app-server.pid (missing)",
"settings": "/home/jose/.codex/app-server-daemon/settings.json (missing)",
"status": "not running",
"update-loop pid file": "/home/jose/.codex/app-server-daemon/app-server-updater.pid (missing)"
},
"remediation": null,
"durationMs": 0
},
"auth.credentials": {
"id": "auth.credentials",
"category": "auth",
"status": "ok",
"summary": "auth is configured",
"details": {
"auth env vars present": "OPENAI_API_KEY",
"auth file": "/home/jose/.codex/auth.json",
"auth storage mode": "File",
"stored API key": "false",
"stored ChatGPT tokens": "true",
"stored agent identity": "false",
"stored auth mode": "chatgpt"
},
"remediation": null,
"durationMs": 0
},
"config.load": {
"id": "config.load",
"category": "config",
"status": "ok",
"summary": "config loaded",
"details": {
"CODEX_HOME": "/home/jose/.codex",
"config.toml": "/home/jose/.codex/config.toml",
"config.toml parse": "ok",
"cwd": "/home/jose/IdeaProjects/yvateve",
"enabled feature flags": "shell_tool, unified_exec, shell_snapshot, code_mode_host, terminal_resize_reflow, sqlite, hooks, enable_request_compression, multi_agent, apps, tool_search_always_defer_mcp_tools, tool_suggest, plugins, in_app_browser, in_app_updates, browser_use, browser_use_full_cdp_access, browser_use_external, computer_use, remote_plugin, plugin_sharing, image_generation, resize_all_images, item_ids, skill_mcp_dependency_install, skill_search, mentions_v2, steer, guardian_approval, goals, collaboration_modes, tool_call_mcp_elicitation, auth_elicitation, personality, fast_mode, tui_app_server, remote_compaction_v2, workspace_dependencies",
"feature flag overrides": "none",
"feature flags enabled": "38",
"log dir": "/home/jose/.codex/log",
"mcp servers": "2",
"model": "gpt-5.6-sol",
"model provider": "openai",
"sqlite home": "/home/jose/.codex"
},
"remediation": null,
"durationMs": 0
},
"git.environment": {
"id": "git.environment",
"category": "git",
"status": "ok",
"summary": "git version 2.34.1",
"details": {
".git entry": "directory",
"PATH git #1": "/usr/bin/git",
"PATH git #2": "/bin/git",
"PATH git entries": "2",
"git branch": "main",
"git build options": "git version 2.34.1; cpu: x86_64; no commit associated with this build; sizeof-long: 8; sizeof-size_t: 8; shell-path: /bin/sh",
"git exec path": "/usr/lib/git-core",
"git version": "git version 2.34.1",
"repo detected": "true",
"repo root": "/home/jose/IdeaProjects/yvateve",
"selected git": "/usr/bin/git"
},
"remediation": null,
"durationMs": 113
},
"installation": {
"id": "installation",
"category": "install",
"status": "ok",
"summary": "installation looks consistent",
"details": {
"PATH codex #1": "/home/jose/.nvm/versions/node/v22.16.0/bin/codex",
"current executable": "/home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin/codex",
"install context": "npm (package /home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl, bin /home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin, resources /home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-resources, path /home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-path)",
"managed by bun": "false",
"managed by npm": "true",
"managed by pnpm": "false",
"managed package root": "/home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex",
"npm update target": "/home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex"
},
"remediation": null,
"durationMs": 75
},
"mcp.config": {
"id": "mcp.config",
"category": "mcp",
"status": "ok",
"summary": "MCP configuration is locally consistent",
"details": {
"configured servers": "2",
"disabled servers": "0",
"streamable_http servers": "2"
},
"remediation": null,
"durationMs": 1493
},
"network.env": {
"id": "network.env",
"category": "network",
"status": "ok",
"summary": "network-related environment looks readable",
"details": {
"proxy env vars": "none"
},
"remediation": null,
"durationMs": 0
},
"network.provider_reachability": {
"id": "network.provider_reachability",
"category": "reachability",
"status": "ok",
"summary": "active provider endpoints are reachable over HTTP",
"details": {
"openai API base URL": "https://api.openai.com/v1 reachable (HTTP 404)",
"openai API route probe": "https://api.openai.com/v1/<redacted> route exists (HTTP 401)",
"reachability mode": "API key auth"
},
"remediation": null,
"durationMs": 1412
},
"network.websocket_reachability": {
"id": "network.websocket_reachability",
"category": "websocket",
"status": "ok",
"summary": "Responses WebSocket handshake succeeded",
"details": {
"DNS": "2 IPv4, 2 IPv6, first IPv6",
"auth mode": "chatgpt",
"connect timeout": "15000 ms",
"endpoint": "wss://chatgpt.com/backend-api/<redacted>",
"handshake result": "HTTP 101 Switching Protocols",
"model provider": "openai",
"models etag present": "true",
"provider name": "OpenAI",
"proxy env vars": "none",
"reasoning header": "false",
"server model present": "false",
"supports websockets": "true",
"wire API": "responses"
},
"remediation": null,
"durationMs": 793
},
"runtime.provenance": {
"id": "runtime.provenance",
"category": "runtime",
"status": "ok",
"summary": "running npm on linux-x86_64",
"details": {
"commit": "unknown",
"current executable": "/home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin/codex",
"install method": "npm (package /home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl, bin /home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin, resources /home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-resources, path /home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-path)",
"platform": "linux-x86_64",
"version": "0.146.0"
},
"remediation": null,
"durationMs": 0
},
"runtime.search": {
"id": "runtime.search",
"category": "search",
"status": "ok",
"summary": "search is OK (bundled)",
"details": {
"search command": "/home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-path/rg",
"search command readiness": "file exists",
"search provider": "bundled"
},
"remediation": null,
"durationMs": 0
},
"sandbox.helpers": {
"id": "sandbox.helpers",
"category": "sandbox",
"status": "ok",
"summary": "sandbox configuration is readable",
"details": {
"approval policy": "Never",
"codex-linux-sandbox helper": "/home/jose/.codex/tmp/arg0/codex-arg0hVqQKw/codex-linux-sandbox",
"execve wrapper helper": "/home/jose/.codex/tmp/arg0/codex-arg0hVqQKw/codex-execve-wrapper",
"filesystem sandbox": "unrestricted",
"network sandbox": "enabled"
},
"remediation": null,
"durationMs": 0
},
"state.paths": {
"id": "state.paths",
"category": "state",
"status": "ok",
"summary": "state paths and databases are inspectable",
"details": {
"CODEX_HOME": "/home/jose/.codex (dir)",
"active rollout files": "467 files, 3161352432 total bytes, 6769491 average bytes",
"archived rollout files": "0 files, 0 total bytes, 0 average bytes",
"goals DB": "/home/jose/.codex/goals_1.sqlite (file)",
"goals DB integrity": "ok",
"log DB": "/home/jose/.codex/logs_2.sqlite (file)",
"log DB integrity": "ok",
"log dir": "/home/jose/.codex/log (dir)",
"memories DB": "/home/jose/.codex/memories_1.sqlite (file)",
"memories DB integrity": "ok",
"sqlite home": "/home/jose/.codex (dir)",
"state DB": "/home/jose/.codex/state_5.sqlite (file)",
"state DB integrity": "ok",
"thread history DB": "/home/jose/.codex/thread_history_1.sqlite (missing)",
"thread history DB integrity": "skipped (missing)"
},
"remediation": null,
"durationMs": 470
},
"state.rollout_db_parity": {
"id": "state.rollout_db_parity",
"category": "threads",
"status": "warning",
"summary": "rollout files and state DB thread inventory differ",
"details": {
"default model provider": "openai",
"rollout DB active files": "466",
"rollout DB active rows": "466",
"rollout DB archive mismatches": "0",
"rollout DB archived files": "0",
"rollout DB archived rows": "0",
"rollout DB duplicate DB paths": "0",
"rollout DB duplicate rollout thread ids": "0",
"rollout DB malformed file names": "0",
"rollout DB missing active rows": "0",
"rollout DB missing archived rows": "0",
"rollout DB model providers": "openai=466",
"rollout DB rows": "466",
"rollout DB scan cap reached": "false",
"rollout DB scan error sample": "/home/jose/.codex/sessions/2026/04/08/rollout-2026-04-08T11-51-58-019d6d94-25ee-7ab1-8369-191c0886da8f.jsonl (rollout at /home/jose/.codex/sessions/2026/04/08/rollout-2026-04-08T11-51-58-019d6d94-25ee-7ab1-8369-191c0886da8f.jsonl has no usable header record)",
"rollout DB scan errors": "1",
"rollout DB sources": "cli=463, subagent:thread_spawn=3",
"rollout DB stale rows": "0"
},
"issues": [
{
"severity": "warning",
"cause": "rollout scan was incomplete or found bad files",
"measured": "1 scan errors, 0 malformed names, scan cap reached: false",
"expected": "rollout directories are fully scannable",
"remedy": "Check file permissions and unexpected files under CODEX_HOME sessions.",
"fields": []
}
],
"remediation": null,
"durationMs": 244
},
"system.environment": {
"id": "system.environment",
"category": "system",
"status": "ok",
"summary": "OS language es-ES",
"details": {
"EDITOR": "not set",
"LANG": "es_ES.UTF-8",
"VISUAL": "not set",
"os": "Linux Mint 21.1.0 (vera) [64-bit]",
"os language": "es-ES",
"os type": "Linux Mint",
"os version": "21.1.0"
},
"remediation": null,
"durationMs": 42
},
"terminal.env": {
"id": "terminal.env",
"category": "terminal",
"status": "ok",
"summary": "terminal metadata was detected",
"details": {
"COLORTERM": "truecolor",
"DISPLAY": "present",
"color output": "enabled",
"effective locale": "es_ES.UTF-8",
"stderr is terminal": "true",
"stdin is terminal": "true",
"stdout is terminal": "true",
"terminal": "GNOME Terminal",
"terminal size": "80x24"
},
"remediation": null,
"durationMs": 0
},
"terminal.title": {
"id": "terminal.title",
"category": "title",
"status": "ok",
"summary": "terminal title default",
"details": {
"terminal title activity": "true",
"terminal title items": "activity, project-name",
"terminal title project source": "git repo root",
"terminal title project value": "yvateve",
"terminal title source": "default"
},
"remediation": null,
"durationMs": 0
},
"updates.status": {
"id": "updates.status",
"category": "updates",
"status": "ok",
"summary": "update configuration is locally consistent",
"details": {
"cached latest version": "0.146.0",
"check for update on startup": "true",
"last checked at": "2026-08-05T09:50:27.135598583Z",
"latest version": "0.146.0",
"latest version status": "current version is not older",
"npm update target": "/home/jose/.nvm/versions/node/v22.16.0/lib/node_modules/@openai/codex",
"update action": "npm install -g @openai/codex",
"version cache": "/home/jose/.codex/version.json"
},
"remediation": null,
"durationMs": 850
}
}
}What issue are you seeing?
Codex repeatedly blocks an authorized repository-local QA task as a cybersecurity request, replacing the assistant response and interrupting execution.
The task consists exclusively of local/offline unit and integration testing against synthetic objects in a repository I own and am authorized to test. The prompt explicitly prohibits Internet access, real providers, remote
infrastructure, accounts, credentials, and third-party systems.
The displayed message is:
"This content can't be shown. We take extra caution with cybersecurity requests. If you’re a security professional, you may be able to apply for Trusted Access."
This appears to be a false positive caused by software-integrity and adversarial-QA terminology, despite the explicit local-only and authorized constraints.
What steps can reproduce the bug?
Uploaded thread: 019fced3-b8a0-7023-8384-efcb5b112ea7
What is the expected behavior?
Codex should recognize the explicit authorized, repository-local, offline QA scope and continue the task. If one specific action is disallowed, it should identify that action precisely without suppressing the entire response or blocking unrelated local software testing.
Additional information
The false positive has occurred more than once in the same workflow. Before the interruption, repository preflight checks and 31/31 inherited local tests had completed successfully, with no repository modifications or commit created.
The uploaded thread contains the full prompt and conversation context. Thread ID: 019fced3-b8a0-7023-8384-efcb5b112ea7.
3 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
Thanks for the detailed repro. I found related false-positive cybersecurity reports (#33810, #33962, #35981) with similar symptom patterns, so this may be another classifier policy collision. If possible, can you share just the exact command you executed and a sanitized snippet of safety/cybersecurity-related settings (no secrets) so this can be isolated to policy routing vs runtime execution path?
Thanks. The block was not returned by a shell command; it replaced the assistant response while Codex was generating the next turn.
The last command completed before the block was:
strace -ff -e trace=connect -o /tmp/<redacted>/connect ./mvnw -o
-Dtest=AgentSearchCheckpointSixMaxR5CompositionRootIntegrityTest,AgentSearchCheckpointSixMaxR4TrustBoundaryTest,AgentSearchCheckpointSixMaxAdversarialTest,AgentSearchCheckpointSixMaxR3ProvenanceIntegrityTest,AgentSearchCheckpointSixArch
itectureTest,AgentSearchCheckpointSixCaptureBoundaryTest,AdminInterfaceSystemTemplateTest test
It completed successfully with 31 tests, 0 failures, 0 errors and 0 skipped.
Sanitized relevant settings:
The triggering prompt explicitly limited the work to authorized local/offline QA with synthetic test data and prohibited Internet access, credentials, providers, remote services and third-party infrastructure.
Uploaded thread: 019fced3-b8a0-7023-8384-efcb5b112ea7