OpenAI Codex
Filed as: Codex, OpenAI Codex CLI, Codex CLI
Newest record 2026-11-04 · 9 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for OpenAI Codex has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 9
- closed7.3OpenAI Codex OpenAI Codex CLI and Desktop vulnerable to arbitrary code execution via Git metadata
Disclosed · since 1 Sep 2026 · CVE-2026-19592
AI - closed8.8OpenAI Codex OpenAI Codex CLI and Desktop vulnerable to command safety bypass
Disclosed · since 1 Sep 2026 · CVE-2026-19591
AI - closed10.0Ruflo Unauthenticated MCP Bridge Endpoint Exposure in Ruflo
Disclosed · since 9 Jul 2026 · CVE-2026-59726
AI - closed9.8OpenAI Codex CVE-2025-61260: OpenAI Codex CLI enables code execution via malicious MCP files
Disclosed · since 14 Apr 2026 · CVE-2025-61260
AI - closed9.1Claude Code UI CVE-2026-31862: RCE vulnerability in Cloud CLI Claude Code UI
Disclosed · since 11 Mar 2026 · CVE-2026-31862
AI - closed6.5AgentAPI CVE-2025-59956: AgentAPI Client-Side DNS Rebinding Data Exfiltration Flaw
Disclosed · since 30 Sep 2025 · CVE-2025-59956
AI - closed8.6OpenAI Codex CVE-2025-59532: Sandbox bypass and arbitrary file write vulnerability in OpenAI Codex CLI
Disclosed · since 22 Sep 2025 · updated 22 Sep 2025 · CVE-2025-59532
AI - closed8.8OpenAI Codex CVE-2025-55345: Codex CLI Arbitrary File Overwrite Vulnerability
Disclosed · since 13 Aug 2025 · CVE-2025-55345
AI - closed4.1OpenAI Codex Auto-Approval Flaw in OpenAI Codex CLI
Disclosed · since 25 Jul 2025 · CVE-2025-54558
AI
Other incidents: research and unexploited reports · 2
- liveOpenAI Codex OpenAI Codex Jailbreak Toolkit Hides Prompt Adware to Hijack AI Agents
Research · since 4 Nov 2026
AI - closedCursor Researchers bypass browser security in AI coding assistants
Research · since 29 Oct 2026
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.