Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@openai/codex

3 known vulnerabilities (1 critical, 2 high), with the versions each affects and the releases that fix them.

Latest release
0.167.0 (Nov 6, 2026): no advisory affects it
Newest unaffected release
0.167.0 (Nov 6, 2026), the latest release
Advisories
3 · 1 critical, 2 high
Weekly downloads
27.7M
Dependents
38
Releases
500+ since 0.160.1 (Oct 5, 2026)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

  • CVE-2025-61260
    No published release is affected
    No published release is affected
  • CVE-2025-59532
    No published release is affected
    No published release is affected
  • CVE-2025-55345
    No published release is affected
    No published release is affected
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects. Older releases aren't stored, so the earliest spans may start sooner.

Advisories 3

  • CVE-2025-61260Critical 9.8

    A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context…

    Affected: through 0.23.0.

    Fixed in 0.160.1 (released Oct 5, 2026, 174 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 0.167.0, is not affected.

    <0.1% of @openai/codex downloads last week were affected versions (5K).

  • Codex has sandbox bypass due to bug in path configuration logic

    Affected: from 0.2.0, fixed in 0.39.0.

    Fixed in 0.39.0.

    The latest release, 0.167.0, is not affected.

    <0.1% of @openai/codex downloads last week were affected versions (4.1K).

  • Unsafe symlink following in restricted workspace-write sandbox leads to RCE

    Affected: fixed in 0.12.0.

    Fixed in 0.12.0.

    The latest release, 0.167.0, is not affected.

    <0.1% of @openai/codex downloads last week were affected versions (4.3K).