A Web Page Dropped AGENTS.md in Downloads. Codex Obeyed It in 90%+ of Tests
Forever Security found a 13 KB AGENTS.md planted in Downloads. Codex rewrote its own config and ran the payload. How it works, and a checklist to run now.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.