Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer.
Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- OpenAI
- Product
- Codex Desktop for Windows, Codex Desktop for Windows (Microsoft Store/MSIX package)
- CVSS v3.1
- 8.0 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Exploitation
- SSVC none, automatable no, impact total
- Weakness
- CWE-88
- Exposure class
- Operating system, AI infrastructure
- NVD status
- Received
Why it ranks 39 (Notable)
- CVSS v3.1 8.0 high
- SSVC: total technical impact
- Product class: operating system, AI infrastructure
- Widely deployed vendor product (OpenAI)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.