Plango
Get Plango

For developers

Mac security

← AI agent vulnerabilities

CVE-2025-54558

Codex

4.1
Severity
Medium
Published
July 25, 2025
Last modified
June 17, 2026

OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.

CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness

References

CVE-2025-54558 on NVD

Listed in

Medium

More Codex CVEs

Sep 1
CVE-2026-195927.3

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting.

 Sep 1
CVE-2026-195918.8

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's…

 Apr 14
CVE-2025-612609.8

A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files.

 Sep 22
CVE-2025-595328.6

Due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where the user started their session.

 Aug 13
CVE-2025-553458.8

Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside…