Codex CLI vulnerabilities

2 known vulnerabilities in Codex CLI from OpenAI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Codex CLI: External Control of System or Configuration Setting

  CVE-2026-19592Sep 1, 2026OpenAI

  OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared repository whose

• 8.8 High severity

  Codex CLI: Improper Neutralization of Escape, Meta, or Control Sequences

  CVE-2026-19591Sep 1, 2026OpenAI

  OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token (--%) differently than PowerShell itself. I