CVE-2025-54558: Openai Codex CLI

Medium severity, CVSS 4.1. EPSS: 0.2% chance of exploitation in the next 30 days.

OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.

Affected products

• Openai Codex CLI: before 0.9.0 (fixed in 0.9.0)

Published 2025-07-25. Last modified 2026-06-17.