2025-08 · 2025-Q3
OpenAI Codex CLI Command Injection
Layer tags: not yet tagged.
Target
OpenAI Codex CLI (before v0.23.0)
Impact
Arbitrary command execution in user's security context; CI/automation runs at risk
Root Cause
Codex implicitly trusted project-local config files and executed embedded commands