We break down a serious Codex CLI security issue that wrote raw WebSocket payloads, prompts, code, paths, and environment variables to local trace logs—and explain how 0.142.5 redacts them, where to find old logs, and how to remove them safely.
The episode also covers a custom model bug that ignored model_reasoning_effort for namespaced slugs, plus the model_catalog_json workaround for restoring reasoning support.