{"data":{"id":"554133a4-a416-4035-a1b6-071bb2fc5e14","title":"CVE-2025-54558: OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or…","summary":"CVE-2025-54558 affects OpenAI Codex CLI versions before 0.9.0, which auto-approve execution of ripgrep (rg) even when the --pre, --hostname-bin, --search-zip or -z flag is present. The weakness is classified as CWE-829, Inclusion of Functionality from Untrusted Control Sphere. NVD has not yet provided an assessment.","solution":"Fixed in 0.9.0. The fix is in commit 6cf4b96f9dbbef8a94acc1ff703eb118481514d8 and pull request openai/codex#1644, covering the change from rust-v0.8.0 to rust-v0.9.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-54558","publishedAt":"2025-07-25T06:15:24.433Z","cveId":"CVE-2025-54558","cweIds":["CWE-829"],"cvssScore":"4.1","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI Codex CLI","ripgrep"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenAI Codex CLI auto-approves ripgrep execution with dangerous flags","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00226,"epssCheckedAt":"2026-11-04T06:10:14.970Z","kevDateAdded":null,"advisoryAliases":["GHSA-q6hp-29g8-7j6j"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T18:09:32.488Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-437"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}