{"data":{"id":"5cae1194-75af-4d73-bf47-c237b0632b60","title":"CVE-2026-19592: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git…","summary":"OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.fsmonitor at an attacker-controlled filesystem-monitor helper, Git runs that helper outside Codex's command sandbox and without user approval, letting attacker code act with the user's privileges, including reading, changing, or deleting files. An ordinary Git clone does not preserve the local .git/config, so exploitation requires a repository delivered or copied with that configuration intact.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19592","publishedAt":"2026-09-01T18:17:40.370Z","cveId":"CVE-2026-19592","cweIds":["CWE-15"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI Codex CLI","Codex Desktop"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenAI Codex CLI and Desktop code execution via malicious repository Git config","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00156,"epssCheckedAt":"2026-11-04T06:10:15.237Z","kevDateAdded":null,"advisoryAliases":["GHSA-26wp-42v3-96xp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T18:08:49.764Z","patchAvailable":null,"disclosureDate":"2026-09-01T18:17:40.370Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":1,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}