OpenAI fixed two Codex sandbox escape vulnerabilities after researchers showed how malicious code could bypass key security restrictions.