CVE-2026-19590

Name of the Vulnerable Software and Affected Versions OpenAI Codex Desktop for Windows and macOS (affected versions not specified)

Description OpenAI Codex Desktop can execute attacker-controlled Git hooks due to automated Git operations trusting the repository local core.hooksPath setting. If a user opens a specially crafted repository where the .git/config points core.hooksPath to a directory controlled by an attacker, Codex may run a malicious hook during repository processing. This execution occurs outside the command sandbox, without user approval, and with the user's privileges, enabling the attacker to read, modify, or delete files and access other account resources. This issue has been exploited in the wild. An ordinary Git clone does not preserve the local configuration necessary for this exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.