Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unsafe symlink following in restricted workspace-write sandbox leads to RCE
Vulnerability Description
Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
CWE-61
Vulnerability Title
OpenAI Codex CLI 安全漏洞
Vulnerability Description
OpenAI Codex CLI是OpenAI开源的一个在终端中运行的轻量级编码代理软件。 OpenAI Codex CLI存在安全漏洞，该漏洞源于恶意上下文中使用Codex CLI可能导致任意文件覆盖和潜在远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A