Skip to content
OpenAdvisories

Product · OpenAI

codex

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-59532 Public exploit

    Codex has sandbox bypass due to bug in path configuration logic

    Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where th…

    OpenAI codex @openai/codex npm