AI relay disables safeguards in Codex and Claude Code

Oct 29, 2026
Symantec found an unauthorized relay that installs genuine Codex and Claude Code tools, routes requests through its infrastructure, and disables security controls.

Dark Reading reports that an unauthorized AI relay is installing genuine command line tools for OpenAI Codex and Anthropic Claude Code on enterprise systems. The Symantec Threat Hunter Team found the service had reached about a dozen organizations since early 2026, mainly in mainland China, with additional cases in South Korea, Taiwan, and Malaysia.

The relay changes the tools to send requests through its own infrastructure instead of OpenAI or Anthropic networks. Its scripts also disable execution sandboxes, enable network access for the write sandbox, turn off telemetry and error reporting, and replace user credentials with tokens issued by the relay.

Symantec observed no malware or other malicious activity linked to the service. However, the relay can access prompts, files, and secrets sent through it, while the disabled sandbox could allow generated commands to run with the user's account privileges.

We hope you enjoyed this article

Consider subscribing to one of our newsletters like Cybersecurity AI Weekly or Daily AI Brief.

Also, consider following us on social media:

Free newsletter

Cybersecurity AI Weekly

Weekly newsletter about AI in Cybersecurity.

Market report

2025 Generative AI in Professional Services Report

Thomson Reuters

This report by Thomson Reuters explores the integration and impact of generative AI technologies, such as ChatGPT and Microsoft Copilot, within the professional services sector. It highlights the growing adoption of GenAI tools across industries like legal, tax, accounting, and government, and discusses the challenges and opportunities these technologies present. The report also examines professionals' perceptions of GenAI and the need for strategic integration to maximize its value.

Read more
Free, six days a week

Daily AI Brief: the AI news that matters, in your inbox.