OpenAI Codex Local Config Hijack

Tim Peck@timpeck

•updated Dec 1, 2025•4•1•99

Detects the creation of a project-local OpenAI Codex configuration file (`.codex/config.toml`) followed by the execution of the `codex` CLI from the same directory. This pattern is indicative of an attempt to exploit CVE-2025-61260, a command injection vulnerability that allows for arbitrary code execution.