OpenAI Codex Desktop for Windows

• CVE-2026-110930 High 8.0 Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, 0.4%