CVE-2026-110930

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code...

CVE-2026-110930

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code...

CVE-2026-110930

The Codex Desktop for Windows application fails to properly validate quotation marks in project paths received from Windows Explorer . This flaw allows an attacker to craft a malicious library where a child item's path contains injection characters. If a user selects "Open project in ChatGPT" for...