Code & Chain · Signal Desk

Mac MCP 2.3.0 r2 Patches Codex Agent Privilege Escalation Risk

Original sourceundercodenews.com

Summary

Mac MCP releases stable version 2.3.0 r2, adding critical security boundary fixes for Codex agents on macOS. Delegated Codex agents now use separate, scope-limited Mac MCP connections and have app access disabled by default at startup, preventing inheritance of the user's broader ChatGPT permission…

Key points

  • Developers using Mac MCP with Codex agents can patch permission boundaries and improve multi-agent collaboration stability with a single version upgrade.
  • Agents inheriting user permissions is the most easily overlooked privilege escalation path in practice; this patch closes that gap directly.
  • Teams running local automation and multi-agent workflows should upgrade as soon as possible and re-review agents' app access scope settings.

Editorial note

This page is Code & Chain's editorial summary of public sources. It may be prepared with AI assistance and published through an automated workflow. Refer to the original sources; this content is not investment, legal, or tax advice.