Skip to content
Heist/ feed
Back to feed
High

Unsafe symlink following in restricted workspace-write sandbox leads to RCE

Type: advisorySources: OSV

Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-55345
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 16:03 UTC · Revision 1

Source evidence

Unsafe symlink following in restricted workspace-write sandbox leads to RCE

core-osv · Original source

Published 13 Aug 2025, 08:55 UTC

Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.

osv:CVE-2025-55345
Complete source record
{
  "id": "1f974657391cafb2b2ea42bb10ce1b51d0d2e2f3826c2d7a74b7f20118179f7c",
  "url": "https://osv.dev/vulnerability/CVE-2025-55345",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Unsafe symlink following in restricted workspace-write sandbox leads to RCE",
    "summary": "Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.",
    "evidence": "osv:CVE-2025-55345",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2025-55345",
      "aliases": [
        "CVE-2025-55345"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/openai/codex",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "1d7924dcfb3b018f658df5982b951f006139f4ea"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.12.0"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  }
                ]
              }
            }
          ],
          "versions": [
            "codex-rs-2925136536b06a324551627468d17e959afa18d4-1-rust-v0.2.0-alpha.2",
            "codex-rs-b289c9207090b2e27494545d7b5404e063bd86f3-1-rust-v0.1.0-alpha.4",
            "codex-rs-6a8a936f75ea44faf05ff4fab0c6a36fc970428d-1-rust-v0.0.2506261603",
            "codex-rs-5fc3c3023d9f179fb416b2722d1434bac278e916-1-rust-v0.0.2506060849",
            "codex-rs-ac6e1b2661320a631d80aa51bdfa8f1635e0c8fa-1-rust-v0.0.2506052246",
            "codex-rs-121686615fd634e35f3e415896f36908cf8632f9-1-rust-v0.0.2506052203",
            "codex-rs-84eae7b1bc4e3b5420f2d6127b7c17e7a979a5b0-1-rust-v0.0.2506052135",
            "codex-rs-45519e12f39777b65c05ed498503ddcb60beb289-1-rust-v0.0.2506030956",
            "codex-rs-ca8e97fcbcb991e542b8689f2d4eab9d30c399d6-1-rust-v0.0.2505302325",
            "codex-rs-378d773f3af95384eef51addf560df30aa9fd15f-1-rust-v0.0.2505301630",
            "codex-rs-dfac02b343605ce61154ab2e075ac6c38f533916-1-rust-v0.0.2505291659",
            "codex-rs-b152435fb95e7f1ab197ae2cdde68ae29a7d219b-1-rust-v0.0.2505291458",
            "codex-rs-d519bd8bbd1e1fd9efdc5d68cf7bebdec0dd0f28-1-rust-v0.0.2505270918",
            "codex-rs-aa156ceac953c3e6f3602e6eb2f61b14ac8adaf3-1-rust-v0.0.2505231205",
            "codex-rs-d2eee362c1c6cdc00bcb5bf1d479823ef33c143a-1-rust-v0.0.2505231137",
            "codex-rs-6a77484c94956d5cd319da3f8500b178ec93fc90-1-rust-v0.0.2505220956",
            "codex-rs-79cb07bf70a9036200aa2b61b211fe47ea13184a-1-rust-v0.0.2505212314",
            "codex-rs-68e94c8c08943e1d4a53bd7987e319ba7dbffb74-1-rust-v0.0.2505191609",
            "codex-rs-c74d7e13e7d8daf3a2493f6216918d5e59a38bed-1-rust-v0.0.2505191518",
            "codex-rs-5ee08335ac690a69035720a798df9865bc5a4278-1-rust-v0.0.2505171051",
            "codex-rs-b5257992b06373acef8b20a4ca25ffc1b96688e2-1-rust-v0.0.2505161708",
            "codex-rs-8d6a8b308e7457d432564083bb2f577cd39e132b-1-rust-v0.0.2505151627",
            "codex-rs-cb19037ca3822e9b19b51417392f8afc046be607-1-rust-v0.0.2505141652",
            "codex-rs-3a70a0bc280734d09448cb08ec05b5c44f7c798e-1-rust-v0.0.2505141337",
            "codex-rs-94c47d69a3f92257e7f9717a2044bd55786eb999-1-rust-v0.0.2505121726",
            "codex-rs-9949f6404378db6f54a01bcadb1956e0535d4921-1-rust-v0.0.2505121520",
            "codex-rs-7f24ec8cae83ae22e7cc306fea4844958370827d-1-rust-v0.0.2505101753",
            "codex-rs-132146b6d4e133d014f763a0d8dabd853f3fc0c0-1-rust-v0.0.2505061740",
            "codex-rs-5915a59c8290765d6097caf4074aae93a85380fa-1-rust-v0.0.2505021951",
            "codex-rs-e40bc9911433bd3f942ef4604626fab5638a7a72-1-rust-v0.0.2504301327",
            "codex-rs-72a4c38e41bc64f5a7c8c73d52f45784cb6b7137-1-rust-v0.0.2504301219",
            "rust-v0.0.2504301132",
            "rust-v.0.0.2504292236",
            "rust-v.0.0.2504292006",
            "rust-v.0.0.2504291954",
            "rust-v.0.0.2504291926",
            "rust-v0.0.2504291921",
            "rust-v.0.0.2504291921"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-55345.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:30.318615313Z",
      "provider": "osv",
      "references": [
        "https://www.npmjs.com",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55345.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-55345",
        "https://research.jfrog.com/vulnerabilities/codex-cli-symlink-arbitrary-file-overwrite-jfsa-2025-001378631/",
        "https://github.com/openai/codex/pull/1705"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-61"
        ],
        "cna_assigner": "JFROG",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55345.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-55345",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 497107,
  "published_at": "2025-08-13T08:55:14.016+00:00"
}