A vulnerability marked as critical has been reported in OpenAI Codex CLI up to 0.23.0. The affected element is an unknown function of the file codex/config.toml of the component Model Context Protocol Configuration File Handler. This manipulation causes privilege escalation. The attack needs to be done within the local network.
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a, 0.23.0 |
Updated vendor and product information, changed severity to CRITICAL, and provided a more detailed description of the vulnerability.
Initial creation
