---
id: "CVE-2026-110930"
kind: "vulnerability"
aliases: ["CVE-2026-110930"]
title: "Codex Desktop for Windows: crafted File Explorer library path can run attacker code at startup"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "Codex Desktop (Windows application)", "fixed": ["26.1007.21434"], "affected": ">= 26.820.60940, <= 26.1002.52244", "ecosystem": "vendor"}, {"name": "Codex Desktop (Windows Microsoft Store package)", "fixed": ["26.1007.2314.0"], "affected": ">= 26.820.7780.0, <= 26.1002.7124.0", "ecosystem": "vendor"}]
ecosystems: []
tags: ["ai-coding-agent", "ai-tooling", "argument-injection", "codex", "codex-desktop", "windows"]
not_affected_if: ["codex-cli", "codex-not-installed", "linux", "macos", "not-windows", "patched-version"]
published_at: "2026-11-05T20:17:40+00:00"
first_seen_at: "2026-11-05T20:40:44+00:00"
updated_at: "2026-11-05T20:45:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110930", "first_seen_at": "2026-11-05T20:40:44+00:00"}, {"source": "analyst", "url": "https://openai.com/security/advisories/cve-2026-110930", "first_seen_at": "2026-11-05T20:45:15+00:00", "cites": ["https://openai.com/security/advisories/cve-2026-110930", "https://cve.report/CVE-2026-110930"]}]
exploit_sources: []
---

# Codex Desktop for Windows: crafted File Explorer library path can run attacker code at startup

Codex Desktop for Windows did not handle quotation marks in project paths from File Explorer. A path in an attacker's .library-ms library could inject extra startup arguments, which could run attacker code as the current Windows user before sign-in or project approval. OpenAI reports no known abuse in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Codex Desktop (Windows application) affected >= 26.820.60940, <= 26.1002.52244 fixed 26.1007.21434
- vendor:Codex Desktop (Windows Microsoft Store package) affected >= 26.820.7780.0, <= 26.1002.7124.0 fixed 26.1007.2314.0

## How to check

Open Codex Desktop on Windows and check its version. Affected: application 26.820.60940 through 26.1002.52244; Microsoft Store package 26.820.7780.0 through 26.1002.7124.0 (inclusive). Fixed: 26.1007.21434 (Store 26.1007.2314.0) or later.

## Fix

Update Codex Desktop for Windows to 26.1007.21434 (Microsoft Store package 26.1007.2314.0) or later.

## Timeline

- 2026-11-05T20:40:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110930
- 2026-11-05T20:45:15+00:00 analyst https://openai.com/security/advisories/cve-2026-110930 — Read OpenAI advisory (Nov 3 2026): affected ranges and fix 26.1007.21434 / Store 26.1007.2314.0. No exploitation known; no social search done (fresh CVE).

## Documents

- [advisory] OpenAI advisory CVE-2026-110930 https://openai.com/security/advisories/cve-2026-110930
- [mentions] CVE-2026-110930 CVE.report (CNA record) https://cve.report/CVE-2026-110930

## From the sources

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_