OpenAI Codex CLI Command Injection Vulnerability Lets Attackers Execute Arbitrary Commands

Cyberpress • December 2, 2025

Security researchers Isabel Mill and Oded Vanunu uncovered the flaw, tracked as CVE-2025-61260, on December 1, 2025. The Vulnerability Details. The ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OpenAI Codex CLI Vulnerability Enables Command Injection Attacks A command injection vulnerability in OpenAI's Codex CLI has been identified, allowing attackers to execute arbitrary commands on affected systems. This flaw poses a significant risk to users of the Codex CLI, potentially compromising system integrity and security. Details on the specific impact and affected versions have not been disclosed. 6 sources 29

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

CVE-2025-61260