Read the docs
TI-2026-85640 Aliases CVE-2026-110930GHSA-f2g3-r2rh-7h5f

Argument injection in Codex Desktop for Windows project paths

Priority LOW 37CWE-88Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-88.

Summary

OpenAI Codex Desktop for Windows, from 26.820.60940 through 26.1002.52244, and the Microsoft Store/MSIX package, from 26.820.7780.0 through 26.1002.7124.0, is affected. It does not correctly check quotation marks in project paths opened from Windows Explorer, so a path can add application startup arguments (CWE-88). If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the added arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00354 29th percentileScored 2026-11-07
Fix Fixed Codex Desktop for Windows (OpenAI): 26.1007.21434Codex Desktop for Windows (Microsoft Store/MSIX package) (OpenAI): 26.1007.2314.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenAICodex Desktop for Windows26.820.60940 – 26.1002.5224426.1007.21434Patch availableCNA
OpenAICodex Desktop for Windows (Microsoft Store/MSIX package)26.820.7780.0 – 26.1002.7124.026.1007.2314.0Patch availableCNA
  • Codex Desktop for Windows VendorOpenAI Affected 26.820.60940 – 26.1002.52244 Fixed in 26.1007.21434 Patch available CNA
  • Codex Desktop for Windows (Microsoft Store/MSIX package) VendorOpenAI Affected 26.820.7780.0 – 26.1002.7124.0 Fixed in 26.1007.2314.0 Patch available CNA

Remediation

Update Codex Desktop for Windows to version 26.1007.21434 and the Microsoft Store/MSIX package to version 26.1007.2314.0.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA Codex Desktop for Windows (OpenAI) Fixed in 26.1007.21434
  • Fix · CNA Codex Desktop for Windows (Microsoft Store/MSIX package) (OpenAI) Fixed in 26.1007.2314.0

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-11-05 Threatist record created from CVE-2026-110930
  2. 2026-11-05 CVSS score added · CISA ADP
  3. 2026-11-05 CISA SSVC decision points changed
  4. 2026-11-05 Alias added: GHSA-f2g3-r2rh-7h5f
  5. 2026-11-06 Affected versions changed · Red Hat
  6. 2026-11-06 CVSS score added · Red Hat

References

Other 1

  • TI-2026-15921 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS… CVSS 3.1HIGH 7.3
  • TI-2025-06388 OpenAI Operator - API Spoofing through Locking Operator on FullScreen CVSS 4.0MEDIUM 6.9
  • TI-2026-15922 OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and… CVSS 3.1CRITICAL 9.8
  • TI-2026-15920 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS… CVSS 3.1HIGH 8.8
  • TI-2025-37063 Codex has sandbox bypass due to bug in path configuration logic CVSS 4.0HIGH 8.6
  • TI-2026-15919 Uncontrolled search path in OpenAI Codex Desktop CVSS 3.1HIGH 7.3
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences