Head to head
Codex vs GitHub Copilot
Comparing 3 documented Codex incidents against 4 for GitHub Copilot.
Verdict
Codex has the lower average failure severity (5.8/10 vs 8.2/10), making it the statistically safer choice of the two — though both agents have documented critical incidents.
| Metric | Codex | GitHub Copilot |
|---|---|---|
| Documented incidents | 3 | 4 |
| Average severity | 5.8 | 8.2 |
| Critical | 0 | 3 |
| High | 1 | 0 |
| Verified | 2 | 4 |
Severity at a glance
Codex
5.8
medium
GitHub Copilot
8.2
high
Failure modes
CodexDistribution of failure modes across all documented incidents.
GitHub CopilotDistribution of failure modes across all documented incidents.
The incidents behind these numbers
Codex
8.0OpenAI Codex wiped an entire hard drive after being asked to delete one old backup file (GitHub #11006)6.0OpenAI Codex ran "rm -rf *" and deleted an entire project after the user pressured it to stop pausing for safety checks (GitHub #6801)3.5OpenAI Codex deleted important project files with no explicit request or confirmation, exact command never captured (GitHub #38312)
GitHub Copilot
10.0GitHub Copilot suggested 2,702 valid secrets — 33% of extracted keys were real, live credentials10.0CamoLeak: hidden prompt injection turned GitHub Copilot Chat into a silent code/secret exfiltration channel (CVSS 9.6)10.0Rule Files Backdoor: hidden Unicode in config files made Copilot and Cursor emit malicious code2.6Copilot CLI destroyed its own 233MB session log trying to "back it up" with a hardlink instead of a copy