CVE-2026-19591: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell
Summary
OpenAI's Codex CLI and Desktop tools have a vulnerability where they incorrectly identify certain PowerShell commands as safe due to misunderstanding PowerShell's stop-parsing token (--%, a special symbol that changes how PowerShell interprets commands). An attacker can exploit this by preparing a malicious repository that, when opened by a user, tricks Codex into running file-writing commands without asking for permission, potentially modifying Codex's configuration to launch attacker-controlled code with the user's privileges.
Vulnerability Details
EPSS: 0.0%
September 1, 2026
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19591
First tracked: September 1, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 95%