Vulnerability · Published Aug 13, 2025 · Assigned by JFROG
CVE-2025-55345Unsafe symlink following in restricted workspace-write sandbox leads to RCE
High 8.8
In plain English
A high-severity security flaw in @openai/codex. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.9%top 40.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| @openai/codex | 0 – before 0.12.0 |
Weakness: CWE-61 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H