OpenAI Codex CLI and Desktop vulnerable to arbitrary code execution via Git metadata

# OpenAI Codex CLI and Desktop vulnerable to arbitrary code execution via Git metadata

https://gcdradar.vercel.app/incidents/openai-codex-cli-and-desktop-vulnerable-to-arbitrary-code-ex · AIR-2026-1320 · closed 2026-09-01

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-09-01
- AI role: Attack on AI
- Products: OpenAI Codex CLI, Codex Desktop
- CVE ids: CVE-2026-19592
- CVSS: 7.3

## Summary

OpenAI Codex CLI and Desktop automatically collected Git repository metadata without disabling core.fsmonitor settings. This allowed malicious repositories to execute custom filesystem-monitor helpers outside the sandbox with user privileges.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-09-01: CVE-2026-19592: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository… (https://nvd.nist.gov/vuln/detail/CVE-2026-19592)

## Sources

- 2026-09-01 NVD: CVE-2026-19592: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository… https://nvd.nist.gov/vuln/detail/CVE-2026-19592

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.