Vendor

OpenAI

10 known vulnerabilities.

Products

Codex Desktop 4 Codex Desktop (Microsoft Store package) 4 Codex CLI 3 codex 1 OpenAI Atlas 1 Operator 1 Codex desktop app for macOS 1 Codex Desktop for Windows 1 Codex Desktop for Windows (Microsoft Store/MSIX package) 1

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 8.0

CVE-2026-110930

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user se…

OpenAI Codex Desktop for Windows Codex Desktop for Windows (Microsoft Store/MSIX package) Windows

Nov 5, 2026
High 7.3

CVE-2026-19592

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repo…

OpenAI Codex Desktop (Microsoft Store package) Codex Desktop Codex CLI

Sep 1, 2026
High 8.8

CVE-2026-19591

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell…

OpenAI Codex Desktop (Microsoft Store package) Codex Desktop Codex CLI

Sep 1, 2026
High 7.3

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations…

OpenAI Codex Desktop Codex Desktop (Microsoft Store package)

Sep 1, 2026
High 8.6

CVE-2025-59532 Public exploit

Codex has sandbox bypass due to bug in path configuration logic

Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where th…

OpenAI codex @openai/codex npm

Sep 22, 2025