ZDI-26-649 / CVE-2026-19591

Evidence record

Read the original source ↗

Claim-level citations (4)

• supportsTwo Codex malicious-repository flaws could execute code as the current user: The ZDI advisories do not establish exploitation in the wild.

  Vulnerability details and disclosure timeline; no in-the-wild exploitation finding

• supportsTwo Codex malicious-repository flaws could execute code as the current user: ZDI-26-649 / CVE-2026-19591 describes insufficient neutralization of control sequences in Git command arguments, allowing code execution from a malicious folder.

  Specific flaw in Git command arguments

• supportsTwo Codex malicious-repository flaws could execute code as the current user: ZDI states OpenAI issued updates correcting both vulnerabilities before coordinated public disclosure.

  Vendor response

• supportsTwo Codex malicious-repository flaws could execute code as the current user: CVE-2026-19590 requires the target to visit malicious content or open a malicious file; CVE-2026-19591 requires opening a malicious folder.

  Vulnerability details, opening a malicious folder