HighVulnerabilityLLM-specific
CVE-2026-19590: OpenAI Codex Desktop Git hook execution via repository core.hooksPath setting
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-19590
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2026-19590 affects OpenAI Codex Desktop for Windows and macOS. Automated Git operations trusted the repository's local core.hooksPath setting, so an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlled directory can make Codex run a malicious hook while processing it. The hook runs outside Codex's command sandbox, without user approval, and with the user's privileges, so it can read, change, or delete the user's files and reach other resources available to the account. An ordinary Git clone does not preserve the repository-local configuration needed for exploitation.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSame vendor · NVD/CVE Database
- MediumCVE-2026-113459: TYPO3 OpenAI API key exposed to backend users in page sourceSame vendor · NVD/CVE Database
- MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSame vendor · NVD/CVE Database
- MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database