AIKIDO-2026-905742
@openai/codex is vulnerable to Uncontrolled Search Path Element
73
High Risk
This Affects:
@openai/codexTL;DR
Automated Git operations in Codex trust the repository-local core.hooksPath setting. A repository delivered with a crafted .git/config can point core.hooksPath at an attacker-controlled directory of Git hooks. When Codex performs Git bookkeeping on that repository, it runs those hooks outside the sandbox and without user approval, giving code execution with the user's privileges. The fix passes a command-local core.hooksPath override so internal Git helpers ignore configured hook directories.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and Codex performs automated Git operations on a repository delivered with an attacker-controlled .git/config whose hook path is preserved, which a plain clone would not preserve.
Background info
@openai/codex is vulnerable to Uncontrolled Search Path Element in versions 0.1.4160940 - 0.130.0.
How to fix this
Upgrade the @openai/codex library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.