{"data":{"id":"aed351a5-556a-4f33-a657-f3a09cdf3435","title":"CVE-2026-19590: OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations…","summary":"CVE-2026-19590 affects OpenAI Codex Desktop for Windows and macOS. Automated Git operations trusted the repository's local core.hooksPath setting, so an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlled directory can make Codex run a malicious hook while processing it. The hook runs outside Codex's command sandbox, without user approval, and with the user's privileges, so it can read, change, or delete the user's files and reach other resources available to the account. An ordinary Git clone does not preserve the repository-local configuration needed for exploitation.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19590","publishedAt":"2026-09-01T18:17:40.140Z","cveId":"CVE-2026-19590","cweIds":["CWE-427"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI Codex Desktop"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenAI Codex Desktop Git hook execution via repository core.hooksPath setting","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00152,"epssCheckedAt":"2026-11-04T12:08:35.257Z","kevDateAdded":null,"advisoryAliases":["GHSA-433v-pqvh-w4gj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T18:08:50.545Z","patchAvailable":null,"disclosureDate":"2026-09-01T18:17:40.140Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}