CVE-2025-55345

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.

Published 2025-08-13. Last modified 2026-06-17.