CVE-2026-19592: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repos
Summary
OpenAI's Codex CLI and Desktop tools automatically collected Git repository metadata without disabling a Git setting that could run attacker code. If a user opened a specially prepared repository with a malicious core.fsmonitor setting (a Git configuration that monitors file system changes), the attacker's code could run with the user's full privileges, potentially reading, modifying, or deleting files. This attack requires the repository to be delivered with the malicious configuration already in place, since normal Git cloning doesn't preserve these local settings.
Vulnerability Details
EPSS: 0.0%
September 1, 2026
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19592
First tracked: September 1, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 92%