Check Point finds OpenAI Codex jailbreak that injects gateway ads

Check Point Research found that Haiou, a free jailbreak bundle for OpenAI Codex version 4.5.0, modifies the assistant’s persistent instructions so typing hello displays an advertisement for a commercial AI gateway—an intermediary relaying requests and responses between an application and a model provider. The changes could also influence the technical advice Codex gives. Check Point called the behavior prompt adware. Haiou was found on a misconfigured threat-actor server with hacking tools including Cobalt Strike, but researchers found no evidence linking its author to cybercrime, no information theft, and no indication the advertised gateway was malicious; they did not confirm a supply-chain attack. Claude Code rejected the injected instruction in tests.