Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.
CVSS
No CVSS.
References
Configurations
No configuration.
History
13 Aug 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
13 Aug 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-13 09:15
Updated : 2025-08-13 20:15
NVD link : CVE-2025-55345
Mitre link : CVE-2025-55345
JSON object : View
Products Affected
No product.
CWE
No CWE.