Codex Windows Shell is a local developer tool. It exposes an HTTP server on 127.0.0.1 and runs codex exec on the same machine.

Do not bind this app to a public network interface unless you add authentication, authorization, logging, rate limiting, and an explicit sandbox policy.

If you find a security issue, open a GitHub security advisory or contact the maintainer privately before publishing exploit details.