PT-2025-48450 · Openai · Openai Codex Cli

Published 2025-12-01 · Updated 2026-04-28 · CVE-2025-61260

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenAI Codex CLI versions prior to 0.23.0

Description The OpenAI Codex CLI is susceptible to a command injection flaw stemming from how it processes project-local configuration files. Attackers can exploit this by placing malicious configuration files within repositories. When developers run the Codex CLI in a directory containing these files, arbitrary commands can be executed silently, without requiring user interaction. This can lead to supply chain attacks, potentially compromising developer machines and CI/CD pipelines. The issue arises from a lack of validation when processing repository-level configurations. The vulnerability allows attackers with commit or pull request access to add malicious files (such as .env and .codex/config.toml) that trigger automatic command execution, establish backdoors, and compromise downstream repositories. The vulnerability is tracked as CVE-2025-61260.

Recommendations Update to OpenAI Codex CLI version 0.23.0 or later.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-61260

GHSA-XRXF-JGV3-QMRM

Affected Products

Openai Codex Cli

References · 22

• 🔥 https://research.checkpoint.com/2025/openai-codex-cli-command-injection-vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-61260 · Security Note
• https://osv.dev/vulnerability/GHSA-xrxf-jgv3-qmrm · Vendor Advisory
• https://github.com/openai/codex · Note
• https://twitter.com/Od3dV/status/1995876407810134134 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1pcfwwu/critical_openai_codex_cli_vulnerability_exposes · Reddit Post
• https://twitter.com/cyber_breach/status/1999746867848974449 · Twitter Post
• https://twitter.com/CVEnew/status/2045972389755027956 · Twitter Post
• https://twitter.com/hasamba/status/2049180608606175527 · Twitter Post
• https://twitter.com/jbhall56/status/1995843283550150778 · Twitter Post
• https://twitter.com/TechNadu/status/1995835645206692181 · Twitter Post
• https://twitter.com/greytech_ltd/status/1995569690505347516 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1sqkwog/top_10_trending_cves_20042026 · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1pbdk5t/cve202561260_openai_codex_cli_command_injection · Reddit Post
• https://twitter.com/the_c_protocol/status/1995931133385527404 · Twitter Post