CVE-2025-61260

CVE-2025-61260 A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. … https://t.co/0BYKgn6JLE

AIが「一緒に働く」時代、ちゃんと怖さも知っておきたい。 OpenAIのCodex CLIに脆弱性（CVE-2025-61260）が見つかった。悪意あるリポジトリを開いただけで、設定ファイルが自動ロードされ、任意コードが実行され

設定ファイルを1行確認したら、展開を止めた。 GitLab AdvisoryがCVE-2025-61260を2026年4月に公開した。 Codex CLIはプロジェクトの設定ファイルを実行時に自動でロードする。 細工された.mcp.json一つで、俺の端末で任

A code execution vulnerability (CVE-2025-61260) affects `OpenAI Codex CLI` through malicious `MCP` configurations. Exercise caution with untrusted files. #OpenAICodex #CLI #CodeExecution #infosec https://t.co/ypnIHogZWU

Command injection flaw CVE-2025-61260 in OpenAI Codex CLI allows arbitrary code execution at startup without user permission. The vulnerability exploits implicit trust in MCP server configurations. AI coding tools require the same security scrutiny as any software. Vulnerability

[Today's AI Hot News: OpenAI Codex Vulnerability Found] Vulnerability tracked as CVE-2025-61260 discovered in OpenAI's coding agent Codex CLI. Can be exploited for command execution, potentially facilitating attacks on developers. https://t.co/t9PYKokynS

【今日の注目AIニュース：OpenAICodex脆弱性発見】OpenAIのコーディングエージェントCodexCLIにCVE-2025-61260として追跡される脆弱性が発見。コマンド実行に悪用される可能性があり、開発者への攻撃を容易にする恐

🔴 CVE-2025-61260 - OpenAI Codex CLI Project-Local Command Injection OpenAI's Codex CLI has a command injection flaw in project-local configuration parsing. What's interesting: attackers place malicious config files in repos that execute arbitrary commands when developers r

OpenAI Codex CLI vuln (CVE-2025-61260) allowed command execution on dev boxes, now patched. Worth checking what your "helpful" coding agent could run without asking. #infosec https://t.co/sRWAaCWDS4

CVE-2025-61260 — OpenAI Codex CLI: Command Injection via Project-Local Configuration https://t.co/ZQNaWtzuzt #appsec

A Codex CLI flaw allowed silent RCE from malicious repo configs (CVE-2025-61260). • Auto-executed MCP commands • Backdoors via simple commits/PRs • Risk to developer machines + CI pipelines • Zero validation of repo configs • Patched in v0.23.0 Researchers say it highli

⚡️ Cybersecurity Developments in the Last 12 Hours ⚡️ 🚨 Coupang confirmed a major data breach exposing personal details for 33.7 million customers, likely involving unauthorized access tied to an insider token. 👾 Check Point disclosed CVE-2025-61260 in the OpenAI