@openai/codex vulnerabilities (npm)

2 vulnerabilities.

• @openai/codex npm OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files CVE-2025-61260 9.8 CriticalApril 14, 2026
• @openai/codex npm Codex has sandbox bypass due to bug in path configuration logic CVE-2025-59532 Public exploitFix available 8.6 HighSeptember 19, 2025