False positive on cybersecurity requests #33810

Activity

1. koenatdatix

   added

   bugSomething isn't workingSomething isn't working

   on Jul 17, 2026
2. github-actions

   added

   CLIIssues related to the Codex CLIIssues related to the Codex CLI

   safety-checkIssues related to safety and abuse checksIssues related to safety and abuse checks

   on Jul 17, 2026
3. github-actions commented on Jul 17, 2026

   

   github-actionsbot

   on Jul 17, 2026 – with GitHub Actions

   Contributor

   More actions

   Potential duplicates detected. Please review them and close your issue if it is a duplicate.

   • False positive of cybersecurity block for local adversarial machine learning research #33766
   • False positive security triggers hiding codex responses in concurrent data structure research code #33696
   • False-positive cybersecurity block for local MySQL MTR regression testing #33302
   • Legitimate cryptography development incorrectly blocked by cyber safety classifier #33675
   • False-positive cybersecurity block triggered by harmless CLI input #33594

   Powered by Codex Action

   👎React with 👎1Reacted by hexx1
4. DKWien commented on Jul 18, 2026

   

   DKWien

   on Jul 18, 2026 – with ChatGPT Codex Connector

   More actions

   I can confirm the same false-positive safety-check behavior in Codex Desktop for Windows.

   Feedback session: 019f742b-789f-75a0-ad61-84cb45fc0d38

   This occurred during explicitly authorized maintenance of my own software in a documented, isolated, disposable local lab. The task was fail-closed and explicitly prohibited access to live, public, or third-party systems; new access or credentials; expansion of targets or network boundaries; downloads; and disclosure of sensitive values.

   Despite those constraints, legitimate defensive integration work was repeatedly blocked or hidden with the cybersecurity safety-check message. No unauthorized or harmful activity was requested.

   • Surface: Codex Desktop for Windows
   • Date: 2026-07-18 (CEST)
   • Related behavior: This content can't be shown cybersecurity false positive

   Model and diagnostic metadata should be associated with the feedback session. Sensitive local paths, hosts, addresses, credentials, and infrastructure details have deliberately been omitted.

   👍React with 👍1Reacted by hexx1
5. hexxone commented on Jul 24, 2026

   

   hexxone

   on Jul 24, 2026

   More actions

   +1 Same problem