Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenAI Codex CLI 安全漏洞
Vulnerability Description
OpenAI Codex CLI是OpenAI开源的一个在终端中运行的轻量级编码代理软件。 OpenAI Codex CLI v0.23.0及之前版本存在安全漏洞，该漏洞源于自动加载恶意MCP配置文件，可能导致在恶意或受感染的存储库中运行codex命令时执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A