CODEX DESKTOP (WINDOWS APPLICATION) · CVE-2026-110930 · AI agents & MCP
FIX → 26.1007.21434 · 26.1007.2314.0 ✓ verified
Codex Desktop for Windows did not handle quotation marks in project paths from File Explorer. A path in an attacker's .library-ms library could inject extra startup arguments, which could run attacker code as the current Windows user before sign-in or project approval. OpenAI reports no known abuse in the wild.
first public Nov 5, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Windows users running Codex Desktop in the affected version ranges. Exploitation needs Codex fully closed (no ChatGPT.exe running), Windows 11, and the user opening an attacker's .library-ms file in File Explorer, expanding the library, and choosing Open project in ChatGPT from the modern right-click menu on an item in it. Anyone on 26.1007.21434 or later, or not on Windows, can skip it.
Not affected if codex-cli, codex-not-installed, linux, macos, not-windows, patched-version
Who cares ai-coding-agent, argument-injection, codex, codex-desktop, windows
26.820.60940 through 26.1002.52244; Microsoft Store package through (inclusive)Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
26.820.7780.026.1002.7124.026.1007.21434 (Store 26.1007.2314.0) or laterUpgrade to 26.1007.21434 · 26.1007.2314.0
Update Codex Desktop for Windows to 26.1007.21434 (Microsoft Store package 26.1007.2314.0) or later.