hexcast.
SECURITY

Codex /goal Exposes Rust, Keycloak Bugs Before Release

Codex’s /goal found all Rust bugs submitted, including a soundness hole patched in Rust 1.98. It flagged 11 variant hits from CVE-derived Semgrep rules and uncovered two privilege-escalation bugs in Keycloak. Key techniques: let Codex draft goals, define outcomes not paths, assign one outcome per agent.

BLOG.TRAILOFBITS.COM · JUL 28