ZDI-26-648 / CVE-2026-19590

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsTwo Codex malicious-repository flaws could execute code as the current user: ZDI-26-648 / CVE-2026-19590 describes unsafe configuration handling leading to code execution after attacker-controlled content is opened.

  Specific flaw and user-interaction requirement

• supportsTwo Codex malicious-repository flaws could execute code as the current user: Both vulnerabilities carry CVSS 7.8 and allow code execution in the context of the current user.

  CVSS score and vulnerability details

• supportsTwo Codex malicious-repository flaws could execute code as the current user: Both vulnerabilities were reported to OpenAI on June 2, 2026 and publicly disclosed in coordinated ZDI advisories on September 10, 2026.

  Disclosure timeline