{"data":{"id":"fc7d4023-54cf-486f-9d52-ef4dd105700e","title":"CVE-2026-19593: OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user…","summary":"OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. A repository carrying an attacker-controlled .git/config, with attr.tree and a configured clean or process filter, could make Git run an attacker-controlled program outside Codex's command sandbox, with the signed-in user's privileges and no trust prompt or command approval. Exploitation requires Git on PATH and the user opening the attacker-prepared repository with its local Git configuration intact.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19593","publishedAt":"2026-09-01T18:17:40.480Z","cveId":"CVE-2026-19593","cweIds":["CWE-15"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI Codex Desktop"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenAI Codex Desktop command execution through repository Git configuration","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00522,"epssCheckedAt":"2026-11-04T06:10:14.546Z","kevDateAdded":null,"advisoryAliases":["GHSA-hcf6-9q9g-xx3c"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T18:08:49.377Z","patchAvailable":null,"disclosureDate":"2026-09-01T18:17:40.480Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}