codex - 💡(How to fix) Fix Unexpected anomalous Cyrillic characters appended to Codex CLI output [3 comments, 3 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openai/codex#20054Fetched 2026-04-29 06:23:27
View on GitHub
Comments
3
Participants
3
Timeline
7
Reactions
0
Timeline (top)
commented ×3labeled ×3closed ×1

Root Cause

However, I am currently investigating suspicious local network behavior and possible DNS redirection anomalies in my environment. Because of that context, I want to rule out several possibilities, including:

RAW_BUFFERClick to expand / collapse

What issue are you seeing?

Bug summary

While using Codex CLI, I observed an unexpected fragment appended to a response: <Let's answer in French. Minimal but substantive. +#+#+#+#+#+қты.>

The trailing characters appear abnormal in this context and seem to include Cyrillic characters.

I am opening this issue to determine whether this fragment was:

  1. present in the raw response returned by the service, or
  2. introduced later by the local client, terminal rendering layer, encoding, or Codex CLI itself.

Context

My system is configured in French:

  • Locale: fr_FR.UTF-8
  • Shell: bash
  • Time zone: Europe/Brussels (CEST, [UTC+02:00)]
<img width="1920" height="1048" alt="Image" src="https://github.com/user-attachments/assets/f1020d76-8d3a-4e01-b894-d288d29c00b8" />

In this environment, unexpected Cyrillic characters at the end of a Codex CLI response are out of place and deserve verification.

Security relevance

I am not claiming that this element alone proves a compromise.

However, I am currently investigating suspicious local network behavior and possible DNS redirection anomalies in my environment. Because of that context, I want to rule out several possibilities, including:

  • anomalous model output returned by the service,
  • client-side rendering or encoding corruption in Codex CLI,
  • local workstation/environment-side corruption,
  • or, less likely but still worth excluding, a transport-path issue if the raw server-side response did not contain the fragment.

I am reporting this conservatively as an anomalous output issue with possible security relevance until the origin of the fragment is clarified.

Reproduction

At this stage, reproduction is not yet confirmed.

Reproducibility

  • Reproducible every time
  • Intermittent
  • Observed at least once
  • Exact trigger currently unknown

Steps to reproduce

At the moment I do not have a minimal deterministic reproduction. I will add one if I can isolate the conditions.

Environment

  • Codex CLI version: 0.125.0
  • OS: Fedora release 43 (Forty Three)
  • Kernel: Linux 6.19.9-200.fc43.x86_64
  • Architecture: x86_64
  • Shell: bash
  • Locale: fr_FR.UTF-8
  • Time zone: Europe/Brussels (CEST, UTC+02:00)

Raw observed string

Let's answer in French. Minimal but substantive. +#+#+#+#+#+қты.

Questions for maintainers

  1. Has this type of anomalous trailing fragment already been reported in Codex CLI?
  2. Is there any known issue involving terminal rendering, Unicode handling, encoding, or post-processing of model output?
  3. Can you confirm whether the raw server-side response already contained the anomalous fragment?
  4. If the raw response did not contain it, could this indicate a client-side corruption issue in Codex CLI or another local rendering/encoding problem?
  5. Is there a recommended way to capture or inspect the raw response before terminal rendering for verification?
  6. If request/completion identifiers exist locally, where should I look to retrieve them?

Notes

I am intentionally reporting this conservatively as an anomalous output / rendering / encoding issue until stronger evidence exists one way or the other.

What steps can reproduce the bug?

I do not yet have a deterministic minimal reproduction.

Observed scenario:

  1. Use Codex CLI in a Fedora 43 terminal environment.
  2. System locale is set to fr_FR.UTF-8.
  3. Interact normally with Codex CLI and request a response in French.
  4. In at least one observed case, the response ended with an anomalous fragment:

"Let's answer in French. Minimal but substantive. +#+#+#+#+#+қты."

At this stage, I cannot confirm the exact trigger conditions. I am reporting the issue because I need to determine whether the anomalous trailing characters were already present in the raw server-side response or introduced later by the local client / terminal / rendering layer.

What is the expected behavior?

Codex CLI should display only the intended response text, with no unexplained trailing characters or out-of-context Unicode fragments.

In particular, on a system configured with fr_FR.UTF-8, a normal response should not unexpectedly end with unrelated Cyrillic-looking characters unless they are explicitly part of the intended model output.

Additional information

Environment:

  • Codex CLI: 0.125.0
  • OS: Fedora 43
  • Kernel: Linux 6.19.9-200.fc43.x86_64
  • Architecture: x86_64
  • Shell: bash
  • Locale: fr_FR.UTF-8
  • Time zone: Europe/Brussels (CEST, UTC+02:00)

Observed string: "Let's answer in French. Minimal but substantive. +#+#+#+#+#+қты."

Report preparation timestamp:

  • Local: 2026-04-28T19:32:29+02:00
  • UTC: 2026-04-28T17:32:29Z

Important note: I am not claiming that this alone proves a compromise. However, I am currently investigating suspicious local network behavior and possible DNS redirection anomalies in my environment, so I want to rule out:

  • anomalous model output,
  • client-side rendering/encoding corruption,
  • Codex CLI post-processing issues,
  • or another local display / transport-path issue.

I can provide screenshots and additional context if needed.

extent analysis

TL;DR

Verify the raw server-side response to determine if the anomalous trailing fragment is introduced by the Codex CLI or the service itself.

Guidance

  • Check the Codex CLI version (0.125.0) for any known issues related to Unicode handling, encoding, or post-processing of model output.
  • Inspect the terminal rendering layer and locale settings (fr_FR.UTF-8) for potential encoding or rendering issues.
  • Attempt to capture the raw response before terminal rendering to verify if the anomalous fragment is present.
  • Investigate the possibility of client-side corruption or local rendering/encoding problems.

Example

No code snippet is provided as the issue is related to a specific output string and not a code-related problem.

Notes

The issue may be related to a combination of factors, including Codex CLI, terminal rendering, and locale settings. Further investigation is needed to determine the root cause.

Recommendation

Apply a workaround by capturing the raw response and verifying its contents to determine if the issue is client-side or server-side. This will help narrow down the possible causes and guide further troubleshooting.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

codex - 💡(How to fix) Fix Unexpected anomalous Cyrillic characters appended to Codex CLI output [3 comments, 3 participants]