Vulnerability in N/a

CVE-2025-61260

A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malic…

EPSS: 0.001 (16.3th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References