Code Execution Vulnerability in OpenAI Codex for Windows and macOS

CVE-2026-19593

What is CVE-2026-19593?

A flaw in OpenAI Codex for Windows and macOS allows an attacker to execute arbitrary programs through a maliciously crafted Git repository. When users launch a workspace containing a repository with a compromised .git/config file, exploitation can occur without user interaction. This occurs because the attr.tree setting combined with clean or process filters can trigger the execution of attacker-controlled code outside of Codex's secure environment. Users are at risk of unauthorized access to files, modification of content, and potential exposure of sensitive information like credentials. The exploitation requires the presence of Git in the system path and the user to interact with the manipulated repository.

References