Read the docs
TI-2026-15919 Aliases CVE-2026-19590GHSA-433v-pqvh-w4gj

Uncontrolled search path in OpenAI Codex Desktop

Priority LOW 33CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-427.

Summary

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlled directory, Codex can run a malicious hook while processing the repository. The hook executes outside Codex's command sandbox, without user approval, and with the user's privileges, allowing it to read, change, or delete the user's files and access other resources available to the user's account. An ordinary Git clone does not preserve the attacker-controlled repository-local configuration required for exploitation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00152 4th percentileScored 2026-11-07
Fix Fixed Codex Desktop (OpenAI): 26.519.22136, 26.519.21041Codex Desktop (Microsoft Store package) (OpenAI): 26.519.2081.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenAICodex Desktop260202.0859 – 26.513.3131326.519.22136Patch availableCNA
OpenAICodex Desktop26.304.38 – 26.513.4082126.519.21041Patch availableCNA
OpenAICodex Desktop (Microsoft Store package)26.304.38.0 – 26.513.4821.026.519.2081.0Patch availableCNA
  • Codex Desktop VendorOpenAI Affected 260202.0859 – 26.513.31313 Fixed in 26.519.22136 Patch available CNA
  • Codex Desktop VendorOpenAI Affected 26.304.38 – 26.513.40821 Fixed in 26.519.21041 Patch available CNA
  • Codex Desktop (Microsoft Store package) VendorOpenAI Affected 26.304.38.0 – 26.513.4821.0 Fixed in 26.519.2081.0 Patch available CNA

Remediation

  • Fix · CNA Codex Desktop (OpenAI) Fixed in 26.519.22136
  • Fix · CNA Codex Desktop (OpenAI) Fixed in 26.519.21041
  • Fix · CNA Codex Desktop (Microsoft Store package) (OpenAI) Fixed in 26.519.2081.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-19590
  2. 2026-10-03 Alias added: GHSA-433v-pqvh-w4gj

References

Other 1

  • TI-2026-15921 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS… CVSS 3.1HIGH 7.3
  • TI-2025-06388 OpenAI Operator - API Spoofing through Locking Operator on FullScreen CVSS 4.0MEDIUM 6.9
  • TI-2026-15922 OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and… CVSS 3.1CRITICAL 9.8
  • TI-2026-15920 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS… CVSS 3.1HIGH 8.8
  • TI-2025-37063 Codex has sandbox bypass due to bug in path configuration logic CVSS 4.0HIGH 8.6
  • TI-2026-85640 Argument injection in Codex Desktop for Windows project paths CVSS 3.1HIGH 8.0
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences