OpenAI Releases Codex CLI 0.158 With OAuth Security Updates
Codex CLI v0.158.0 adds OAuth support for MCP servers that use pre-registered client secrets and bearer-token protection for direct exec-server WebSocket connections. It also enables terminal approval by default for commands using elevated permissions, reduces repeat reviews for grants limited to a single run, and includes sandbox fixes across Windows, Linux and macOS. Because the update affects authentication, privileged-command review and platform-specific sandbox behavior, coverage recommends treating it as a controlled upgrade: check the release against local configuration, test it in a canary environment and retain human review before wider rollout. The release notes describe product changes, not a security certification.
How it spread
Claim check
What each side asserts, disputes — or leaves out entirely.
Where do you land?
Whose framing of this story rings truest to you?
