Report vulnerabilities via a private issue in the repository or by email to the project maintainer.

• Bundled runtime execution and sandbox boundaries
• Local persistence (SQLite, CODEX_HOME, keyring)
• Command and patch approvals
• Updates and sidecar integrity

• Vulnerabilities in remote third-party services
• Reverse engineering of private APIs

• The bundled runtime is hash-verified before packaging (runtime-manifest.json + CI).
• Credentials are not logged or included in crash reports.
• Filesystem access is limited to user-selected workspaces.
• Release artifacts may include SPDX SBOM and cosign signatures when published from tagged builds.

Cotux is an independent open-source client. It is not affiliated with, endorsed by, or sponsored by OpenAI. Users sign in through the official Codex App Server OAuth flow; Cotux does not embed chatgpt.com or scrape private web APIs.