Hackers broke OpenAI's coding agent on day one of a contest.
Pwn2Own Ireland opened on Tuesday with AI software as a full target category. Ikotas Labs took over OpenAI's Codex with an injected argument and won $40,000. A second team opened a remote shell on LiteLLM, the gateway apps use to reach models.
Why it mattersCoding agents hold your repository keys and your cloud tokens. A bug that turns one into a shell hands an attacker everything it can touch.