CVE-2025-61260
CVE-2025-61260
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.
CVSS 9.8 · Critical · EPSS 6.6%
- Published
- Updated
Stack: node
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
@openai/codex npm
- Affected ranges
- SEMVER: ≤ 0.23.0
No fix published