CVE-2026-19590 OpenAI CVE debrief

Who should care

Users of OpenAI Codex Desktop for Windows and macOS, administrators of Git repositories, security teams monitoring for potential Git-based attacks, and operators of platforms hosting Git repositories should be aware of this vulnerability. These stakeholders need to verify their Git repository configurations, exercise caution when processing untrusted repositories, and monitor repository activity for suspicious Git hook executions. Additionally, security teams should review compensating controls for exposed systems while remediation is scheduled and verified, and track exceptions and retest remediated assets to ensure thorough mitigation of the vulnerability's impact across their environments and assets that may be affected by this vulnerability in OpenAI Codex Desktop for Windows and macOS, and to ensure that appropriate defensive measures are in place to prevent exploitation of this vulnerability in their environments and assets that may be affected by this vulnerability in OpenAI Codex Desktop for Windows and macOS, and to ensure that appropriate defensive measures are in place to prevent exploitation of this vulnerability in their environments and assets that may be affected by this vulnerability in OpenAI Codex Desktop for Windows and macOS, and to ensure that appropriate defensive measures are in place to prevent exploitation of this vulnerability in their environments and assets that may be affected by this vulnerability in OpenAI Codex Desktop for Windows and macOS, and to ensure that appropriate defensive measures are in place to prevent exploitation of this vulnerability in their environments and assets that may be affected by this vulnerability in OpenAI Codex Desktop for Windows and macOS, and to ensure that appropriate defensive measures are in place to prevent exploitation of this vulnerability in their environments and assets that may be affected by this vulnerability in OpenAI Codex Desktop for Windows and macOS, and to ensure that appropriate defensive measures are in place to prevent exploitation of this vulnerability in their environments and assets that may be affected by this vulnerability in OpenAI Codex Desktop for Windows and macOS, and to

Technical summary

The vulnerability in OpenAI Codex Desktop for Windows and macOS stems from its trust in the repository's local core.hooksPath setting for automated Git operations. An attacker-prepared repository can exploit this trust by running a malicious hook outside Codex's command sandbox with the user's privileges. This exploitation can occur when a user opens the attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlled directory. The execution of the hook is outside Codex's command sandbox, without user approval, and with the user's privileges, allowing it to read, change, or delete the user's files and access other resources available to the user's account.

Defensive priority

OpenAI Codex Desktop users should verify their Git repository configurations and exercise caution when processing untrusted repositories.

Recommended defensive actions

• Verify Git repository configurations for untrusted sources
• Exercise caution when processing repositories from unknown or untrusted origins
• Monitor repository activity for suspicious Git hook executions
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Review compensating controls for exposed systems while remediation is scheduled and verified

Evidence notes

The CVE record indicates that OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks due to trusting the repository's local core.hooksPath setting. An attacker-prepared repository can exploit this by running a malicious hook outside Codex's command sandbox with the user's privileges.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.