CODEX 1 CVE-2025-61260 — OpenAI Codex CLI Command Injection via Project-Local Configuration Dec 1, 2025