CVE-2026-19593

CVE-2026-19593 affects OpenAI Codex Desktop on Windows and macOS. When a user opens a workspace, Codex automatically inspects Git metadata and working-tree status. If the workspace contains a repository with an attacker-controlled .git/config that sets attr.tree along with a configured clean or p...