Vulnerability Description
Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/openai/codex/pull/1705
- https://research.jfrog.com/vulnerabilities/codex-cli-symlink-arbitrary-file-over
- https://research.jfrog.com/vulnerabilities/codex-cli-symlink-arbitrary-file-over
FAQ
What is CVE-2025-55345?
CVE-2025-55345 is a vulnerability with a CVSS score of 8.8 (HIGH). Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed ou...
How severe is CVE-2025-55345?
CVE-2025-55345 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-55345?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.