GHSA-w5fx-fh39-j5rwPublished
Codex has sandbox bypass due to bug in path configuration logic
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-59532 · Microsoft / collected KEV context
cve-program · CVE-2025-59532
- https://github.com/openai/codex/security/advisories/GHSA-w5fx-fh39-j5rw
- https://github.com/openai/codex/commit/8595237505a1e0faabc2af3db805b66ce3ae182d
- https://github.com/openai/codex/releases/tag/rust-v0.39.0
euvd · EUVD-2025-30278
- https://github.com/openai/codex/security/advisories/GHSA-w5fx-fh39-j5rw
- https://github.com/openai/codex/commit/8595237505a1e0faabc2af3db805b66ce3ae182d
- https://github.com/openai/codex/releases/tag/rust-v0.39.0
nvd · CVE-2025-59532
- https://github.com/openai/codex/commit/8595237505a1e0faabc2af3db805b66ce3ae182d
- https://github.com/openai/codex/releases/tag/rust-v0.39.0
- https://github.com/openai/codex/security/advisories/GHSA-w5fx-fh39-j5rw
osv · GHSA-w5fx-fh39-j5rw
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.