Vulnerability · Published Nov 5, 2026 · Assigned by OAI
CVE-2026-110930
High 8.0
In plain English
A high-severity argument injection in Codex Desktop for Windows from OpenAI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Official description
Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenAI | Codex Desktop for Windows | 26.820.60940 – through 26.1002.52244 |
| OpenAI | Codex Desktop for Windows (Microsoft Store/MSIX package) | 26.820.7780.0 – through 26.1002.7124.0 |
Weakness: CWE-88 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H