CVE-2025-61260

A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP Model Context Protocol configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads...

OpenAI Codex CLI security vulnerabilities

OpenAI Codex CLI is a lightweight coding agent software developed by OpenAI and run in the terminal. OpenAI Codex CLI versions prior to v0.23.0 have security vulnerabilities; these vulnerabilities stem from automatically loading malicious MCP configuration files, which may allow arbitrary code to...

Path Traversal in CLI

...

CVE-2025-68649: Improper Limitation of a Pathname to a Restricted Directory

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4, FortiAnalyzer...

oci-cli-3.76.2-1.1 on GA media (moderate)

oci-cli-3.76.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10539-1 Rating: moderate Cross-References: CVE-2024-37891 CVE-2024-47081 CVE-2025-47273 CVE-2025-50181 CVE-2025-66418 CVE-2026-21441 CVE-2026-26007 CVSS scores: CVE-2024-37891 SUSE : 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N...

CVE-2025-61260

A code execution vulnerability exists in OpenAI Codex CLI v0.23.0 and prior versions. The flaw allows for arbitrary command execution because the tool automatically loads project-local .env and .codex/config.toml files without user confirmation. An attacker can trigger this by tricking a user int...

CVE-2026-33948 jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen to determine buffer length instead of the actual byte...

CVE-2026-21916

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

CVE-2026-21915

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

OPENSUSE-SU-2026:10539-1 oci-cli-3.76.2-1.1 on GA media

These are all security issues fixed in the oci-cli-3.76.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: istio, chaos-mesh, flux, linkerd2-fips, cluster-api-helm-controller-fips, flux-source-controller, trivy-operator, nova, k9s-fips, kubescape-server-fips, rancher-fleet, helm, cilium-cli, kuma, cloudbeat, helm-operator-fips, helm-push, kubescape, rancher-fleet-fips,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis, newrelic-fluent-bit-output, kyverno, go, kubescape, prometheus, coredns, snyk-cli, kaf, kine, kube-fluentd-operator, kubernetes-dashboard, aws-flb-firehose, gitlab-kas, chezmoi, telegraf, fscrypt, external-dns, libnvidia-container, runc, gitlab-pages...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, nri-mysql, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, wuzz, goreleaser, crossplane-provider-keycloak,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, step-issuer, verticadb-operator, kwok, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, kubernetes-csi-driver-nfs, newrelic-fluent-bit-output, rclone, crossplane-provider-azure-storage, azure-service-operator, prometheus,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, argo-cd, gomplate-fips, kubescape, consul-fips, tigera-operator-fips, azuredisk-csi-fips, commercial-grafana, external-secrets-operator, knative-operator, filebrowser, kyverno-fips, newrelic-infrastructure-agent, helm-exporter, mailpit-fips, atla...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, argo-cd, gomplate-fips, kubescape, consul-fips, tigera-operator-fips, azuredisk-csi-fips, commercial-grafana, external-secrets-operator, knative-operator, filebrowser, kyverno-fips, newrelic-infrastructure-agent, helm-exporter, mailpit-fips, atla...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, aws-otel-collector-fips, teleport-operator-fips, argo-cd, http-echo, minio-operator, logstash-exporter-fips, kubevirt-cdi-uploadproxy-fips, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, aws-otel-collector-fips, teleport-operator-fips, argo-cd, http-echo, minio-operator, logstash-exporter-fips, kubevirt-cdi-uploadproxy-fips, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, aws-otel-collector-fips, teleport-operator-fips, argo-cd, http-echo, minio-operator, logstash-exporter-fips, kubevirt-cdi-uploadproxy-fips, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator,...