Windows desktop Codex flashes visible command-prompt windows during work

Open 💬 2 comments Opened Aug 5, 2026 by Zyst77
💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

Description

On Windows, while Codex is actively working, command-prompt or console windows briefly flash in front of other applications and then disappear. This is disruptive and can look like unauthorized activity.

Environment

  • Operating system: Windows
  • Surface: Codex desktop app
  • Observed runner version: 0.146.0-alpha.3.1

Observed behavior

During an active Codex task, Windows process inspection showed Codex command-runner processes spawning Windows Console Host (conhost.exe) children. The console windows appear briefly in the foreground rather than remaining hidden or in the background.

The behavior correlates directly with Codex working. No SSH process or Codex/OpenAI scheduled task was found during the investigation.

Expected behavior

Command execution should remain hidden or backgrounded unless the user explicitly requests an interactive terminal window.

Impact

Repeated foreground flashes interrupt work and can cause users to suspect unauthorized access to their machine.

Requested fix

Ensure Codex's Windows command runner creates console processes with hidden or no-window startup flags, or otherwise prevents transient console hosts from appearing in the foreground.

No user-identifying information, private paths, credentials, files, or conversation content are included in this report.

View original on GitHub ↗

2 Comments

github-actions[bot] contributor · 22 days ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

  • #36560

Powered by Codex Action

CodeGlitch · 11 days ago

Confirmed on Windows x64 with Codex Desktop 26.810.7004.0. During the flashes, process tracing showed codex-command-runner-0.148.0-alpha.9.exe spawning short-lived conhost.exe and pwsh.exe children. One burst produced about five visible console windows within a few seconds. The process creation matched the visible flashes. No logs or private command contents are included.