{"data":{"id":"69922555-1bcf-47f4-ba0c-2b6294788203","title":"CVE-2025-59532: Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox…","summary":"CVE-2025-59532 affects Codex CLI, OpenAI's locally run coding agent, in versions 0.2.0 to 0.38.0. A bug in the sandbox configuration logic let Codex CLI treat a model-generated cwd as the sandbox's writable root, even for paths outside the folder where the session started. This bypassed the workspace boundary and enabled arbitrary file writes and command execution with the permissions of the Codex process, though the network-disabled sandbox restriction was not affected.","solution":"Fixed in Codex CLI 0.39.0, which canonicalizes and validates the sandbox policy boundary against where the user started the session rather than the model-generated path. Users on 0.38.0 or earlier should update immediately via their package manager or by reinstalling the latest Codex CLI. Users of the Codex IDE extension should update to 0.4.12.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-59532","publishedAt":"2025-09-23T01:16:00.130Z","cveId":"CVE-2025-59532","cweIds":["CWE-20"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@openai/codex@>= 0.2.0, <= 0.38.0 (fixed: 0.39.0)"],"affectedPackageNames":["@openai/codex"],"affectedPackageRefs":["npm:@openai/codex"],"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Codex CLI","Codex IDE extension"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Codex CLI sandbox bypass allowing arbitrary file writes and command execution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00894,"epssCheckedAt":"2026-11-04T06:10:15.713Z","kevDateAdded":null,"advisoryAliases":["GHSA-w5fx-fh39-j5rw"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:37.401Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-09-18T21:49:35.913Z","daysToFix":-5,"fixCheckedAt":"2026-10-29T21:43:38.676Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@openai/codex","fixedVersion":"0.39.0","matchedVersion":"0.39.0","fixReleasedAt":"2025-09-18T21:49:35.913Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:43:38.526Z"}]}}