CVE-2026-110930

Vendor

OpenAI

Product

Codex Desktop for Windows, Codex Desktop for Windows (Microsoft Store/MSIX package)

CVSS v3.1

8.0 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness

CWE-88

Exposure class

Operating system, AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 39
   CVE NVD 5h ago

   Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer.

   Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application…

   CVSS 8.0 CVE-2026-110930 OpenAI