CVE-2025-59532
1 advisory.
npm/@openai/codex CVE-2025-59532: high
Codex has sandbox bypass due to bug in path configuration logic
Action: Upgrade @openai/codex to 0.39.0 or later.
npm i @openai/codex@0.39.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 0.39.0 | - |
Fixed versions
| 0.39.0 |
Sources
- osv: GHSA-w5fx-fh39-j5rw
- https://github.com/openai/codex/security/advisories/GHSA-w5fx-fh39-j5rw
- https://nvd.nist.gov/vuln/detail/CVE-2025-59532
- https://github.com/openai/codex/commit/8595237505a1e0faabc2af3db805b66ce3ae182d
- https://github.com/openai/codex
- https://github.com/openai/codex/releases/tag/rust-v0.39.0
CVE-2025-59532 · published · modified · JSON