PT-2025-30717 · Ripgrep+1 · Ripgrep+1

Published 2025-07-25 · Updated 2025-07-25 · CVE-2025-54558

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenAI Codex CLI versions prior to 0.9.0

Description The OpenAI Codex CLI application automatically approves the execution of ripgrep (rg) even when specific flags—--pre, --hostname-bin, --search-zip, or -z—are used.

Recommendations Update to OpenAI Codex CLI version 0.9.0 or later.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2025-54558

Affected Products

Openai Codex Cli

Ripgrep

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-54558 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54558 · Vendor Advisory
• https://github.com/openai/codex/pull/1644 · Note
• https://github.com/openai/codex/commit/6cf4b96f9dbbef8a94acc1ff703eb118481514d8 · Note
• https://github.com/openai/codex/compare/rust-v0.8.0...rust-v0.9.0 · Note
• https://twitter.com/CVEnew/status/1948581266095214863 · Twitter Post