CVE-2025-61260criticalCode execution2026-04-14
CVE-2025-61260: OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files
A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository.
What it is
A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.
How to check
- Affected: @openai/codex (npm) <= 0.23.0.
- Compare your installed version with the range above (command below).
How to fix
- No patched version of @openai/codex is listed yet. Follow the advisory for mitigations.
npm ls @openai/codex -g # or: codex --versionSources
More advisories for this tool