Unauthorized reseller scripts disabled Codex and Claude Code safeguards
Review LEAD-69e907b5
Symantec observed employee-run reseller setup scripts changing genuine CLI configurations across a dozen organizations. It explicitly reports no exploit-based delivery and no evidence of relay-operator abuse. The tools followed the changed configuration; no LLM-initiated unauthorized choice or real autonomous intrusion is established. Exclude under both scopes. Potential exposure is not confirmed theft, outage or financial loss.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Symantec observed employee-run reseller setup scripts changing genuine CLI configurations across a dozen organizations. It explicitly reports no exploit-based delivery and no evidence of relay-operator abuse. The tools followed the changed configuration; no LLM-initiated unauthorized choice or real autonomous intrusion is established. Exclude under both scopes. Potential exposure is not confirmed theft, outage or financial loss.
Reviewed: · Rule: external-intrusion-v1
Evidence status
Original investigator report read; no evidence of rogue task deviation
Dates and discovery
- Incident date
- Since at least early 2026; precise dates undisclosed
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- 2026-11-01T04:01:32.443Z UTC
- Discovery channel
- Codex independent news and Reddit / news
- Discovery source
- https://vibeincidents.com/sources/
When to reconsider
Original evidence that a model independently exceeded its legitimate task and caused organizational security harm; operator-installed unsafe configuration alone is insufficient.
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- VibeIncidents source index discoveryReporting / interview · vibeincidents.com
- Symantec Threat Hunter Team — Sandbox Flipped to Danger-Full-AccessOriginal account · www.security.com · Published 2026-10-29
Decision history
- · Original investigator account reviewed
Symantec observed employee-run reseller setup scripts changing genuine CLI configurations across a dozen organizations. It explicitly reports no exploit-based delivery and no evidence of relay-operator abuse. The tools followed the changed configuration; no LLM-initiated unauthorized choice or real autonomous intrusion is established. Exclude under both scopes. Potential exposure is not confirmed theft, outage or financial loss.
Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.