https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T07:06:05.236812+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110930 fkie_cve-2026-110930 2026-11-12T07:06:05.238248+00:00

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.

 https://db.gcve.eu/vuln/ghsa-f2g3-r2rh-7h5f GHSA-f2g3-r2rh-7h5f 2026-11-12T07:06:05.238304+00:00

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.