{"id":"CVE-2026-19593","revision":"f80d419e72374971a974ccfafbfdae10","records":[{"revision":"f80d419e72374971a974ccfafbfdae10","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-19593","aliases":[],"title":"OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree set…","description":"OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause Git to run an attacker-controlled program. The program runs outside Codex's command sandbox with the signed-in user's privileges, without a workspace-trust prompt, command approval, or interaction with a model. The attacker can read, modify, or delete files and access credentials available to that user. Exploitation requires Git to be available on PATH and the user to open the attacker-prepared repository with its local Git configuration intact. An ordinary Git clone does not copy the source repository's .git/config and is not sufficient by itself.","state":0,"publishedAt":"2026-09-01T17:10:24.909+00:00","modifiedAt":"2026-10-15T16:39:37.88+00:00","affected":[{"ecosystem":"Vendor product","name":"Codex Desktop","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"OpenAI\",\n                    \"product\": \"Codex Desktop\",\n                    \"platforms\": [\n                        \"macOS\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"260202.0859\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"custom\",\n                            \"lessThanOrEqual\": \"26.513.31313\"\n                        },\n                        {\n                            \"version\": \"26.519.22136\",\n                            \"status\": \"unaffected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Codex Desktop","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"OpenAI\",\n                    \"product\": \"Codex Desktop\",\n                    \"platforms\": [\n                        \"Windows\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"26.304.38\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"custom\",\n                            \"lessThanOrEqual\": \"26.513.40821\"\n                        },\n                        {\n                            \"version\": \"26.519.21041\",\n                            \"status\": \"unaffected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Codex Desktop (Microsoft Store package)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"OpenAI\",\n                    \"product\": \"Codex Desktop (Microsoft Store package)\",\n                    \"platforms\": [\n                        \"Windows\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"26.304.38.0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"custom\",\n                            \"lessThanOrEqual\": \"26.513.4821.0\"\n                        },\n                        {\n                            \"version\": \"26.519.2081.0\",\n                            \"status\": \"unaffected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.zerodayinitiative.com/advisories/ZDI-26-651/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-19593","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-19593","identifiers":["CVE-2026-19593"]},"retained":false,"historicalAffected":[]}],"coverage":[]}