Advisories · Technology

OpenAI Codex Desktop (Microsoft Store package).

Every CVE that names OpenAI Codex Desktop (Microsoft Store package) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19592 CVE record

CVSS 7.3 High

OpenAI Codex CLI: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS…
- OpenAI Codex CLI
- OpenAI Codex Desktop
- CWE-15
Not analysed yet 1 Sept 2026
CVE-2026-19593 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

OpenAI Codex Desktop: OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and…
- OpenAI Codex Desktop
- OpenAI Codex Desktop (Microsoft Store package)
- CWE-15
Not analysed yet 1 Sept 2026
CVE-2026-19591 CVE record

CVSS 8.8 High

OpenAI Codex CLI: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS…
- OpenAI Codex CLI
- OpenAI Codex Desktop
- CWE-150
Not analysed yet 1 Sept 2026
CVE-2026-19590 CVE record

CVSS 7.3 High

Uncontrolled search path in OpenAI Codex Desktop and others
- OpenAI Codex Desktop
- OpenAI Codex Desktop (Microsoft Store package)
- CWE-427
Not analysed yet 1 Sept 2026