CVE-2025-59532
BaseFortify
Publication date: 2025-09-22
Last updated on: 2025-09-22
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| openai | codex_cli | 0.38.0 |
| openai | codex_ide_extension | 0.4.11 |
| openai | codex_ide_extension | 0.4.12 |
| openai | codex_cli | 0.39.0 |
| openai | codex_cli | 0.2.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Codex CLI versions 0.2.0 to 0.38.0 arises from a bug in the sandbox configuration logic. The software could mistakenly treat a model-generated current working directory (cwd) as the sandbox's writable root, including paths outside the user's intended workspace. This bypasses the sandbox boundary, allowing arbitrary file writes and command execution with the permissions of the Codex process. The issue does not affect the network-disabled sandbox restriction. It has been fixed in version 0.39.0 by properly canonicalizing and validating the sandbox boundary based on the user's session start location.
How can this vulnerability impact me? :
This vulnerability can allow an attacker or malicious model output to write files or execute commands arbitrarily on the system where Codex CLI is running, within the permissions of the Codex process. This could lead to unauthorized modification or deletion of files, execution of harmful commands, and potential compromise of the affected system.
What immediate steps should I take to mitigate this vulnerability?
Users running Codex CLI versions 0.38.0 or earlier should immediately update to version 0.39.0 or later via their package manager or by reinstalling the latest Codex CLI to ensure sandbox boundaries are enforced. If using the Codex IDE extension, update immediately to version 0.4.12 to fix the sandbox issue.