OpenAI Codex Desktop Bug Exfiltrates Private Local Model Chats via Memories Feature
A bug in OpenAI Codex Desktop app serializes local model chat transcripts and routes them to OpenAI backend servers during background memory syncs. This occurs even when telemetry and analytics are completely disabled. Developers running private models can prevent leaks by setting memories feature to false in their config.
Why it matters
Set [features] memories = false in your Codex configuration immediately if you use local models for private code.
Open full story