CVE-2025-54558 - CERT CVE

  1. CVE-2025-54558

ID CVE-2025-54558
Sažetak OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.
Reference
CVSS
Base: 4.1
Impact: 2.7
Exploitability:1.0
Pristup
VektorSloženostAutentikacija
LOCAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
LOW LOW NONE
CVSS vektor CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Zadnje važnije ažuriranje 25-07-2025 - 02:15
Objavljeno 25-07-2025 - 02:15