Skip to content
OpenAdvisories

Package · npm

@openai/codex

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-61260

    OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files

    A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised …

    @openai/codex npm