CVE-2025-54558

Published July 25th, 2025

View on NVD ↗

CVSS v3

4.1

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.

Lightweight coding agent that runs in your terminal

GitHub

93.9K