The release notes give the sandbox work one line: the release closes "sandbox isolation gaps involving inbound Windows connections, privileged Linux/macOS sockets, and writes through read-only macOS file handles." The linked pull requests…
In the News: September 22, 2026 (Extra 4)
Codex CLI 0.156.0 closes three sandbox gaps and now requires bubblewrap for filesystem-restricted commands on Linux.
Extra edition
Machine-readable
Download Markdown