
- BeyondTrust Phantom Labs finds critical command injection flaw in OpenAI’s ChatGPT Codex
- Vulnerability let attackers steal GitHub OAuth tokens via malicious branch names
- OpenAI patched with stronger input validation, shell escaping, and token controls