{"data":{"id":"5cae1194-75af-4d73-bf47-c237b0632b60","title":"CVE-2026-19592: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repos","summary":"OpenAI's Codex CLI and Desktop tools automatically collected Git repository metadata without disabling a Git setting that could run attacker code. If a user opened a specially prepared repository with a malicious core.fsmonitor setting (a Git configuration that monitors file system changes), the attacker's code could run with the user's full privileges, potentially reading, modifying, or deleting files. This attack requires the repository to be delivered with the malicious configuration already in place, since normal Git cloning doesn't preserve these local settings.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19592","publishedAt":"2026-09-01T18:17:40.370Z","cveId":"CVE-2026-19592","cweIds":["CWE-15"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI","OpenAI Codex CLI","Codex Desktop"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-01T18:17:40.370Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}