important · Edge — Developer tools
A repository owner could replace a SHA-pinned Codex plugin during automatic update and execute code on the developer host.
Affects
Codex CLI, a local AI coding agent and plugin client on developer workstations.
A branch named after the reviewed commit could win Git’s ambiguous-ref resolution because the updater did not check the resulting HEAD. The replacement plugin then ran with the Codex user’s local and connected access.
Detail and 2 sources
The published fix compares the resolved HEAD with the pinned commit.