{"api_version":"1","generated_at":"2026-11-05T21:04:06+00:00","cve":"CVE-2026-110930","urls":{"html":"https://cve.report/CVE-2026-110930","api":"https://cve.report/api/cve/CVE-2026-110930.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-110930","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-110930"},"summary":{"title":"CVE-2026-110930","description":"Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects \"Open project in ChatGPT\" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.","state":"PUBLISHED","assigner":"OAI","published_at":"2026-11-05 20:17:40","updated_at":"2026-11-05 20:17:40"},"problem_types":["CWE-88","CWE-88 CWE-88: Argument Injection"],"metrics":[],"references":[{"url":"https://openai.com/security/advisories/cve-2026-110930/","name":"https://openai.com/security/advisories/cve-2026-110930/","refsource":"8f4f43ab-ba69-4d92-aa1d-d772184d6fb7","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110930","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110930","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"OpenAI","product":"Codex Desktop for Windows","version":"affected 26.820.60940 26.1002.52244 custom","platforms":[]},{"source":"CNA","vendor":"OpenAI","product":"Codex Desktop for Windows","version":"unaffected 26.1007.21434","platforms":[]},{"source":"CNA","vendor":"OpenAI","product":"Codex Desktop for Windows (Microsoft Store/MSIX package)","version":"affected 26.820.7780.0 26.1002.7124.0 custom","platforms":[]},{"source":"CNA","vendor":"OpenAI","product":"Codex Desktop for Windows (Microsoft Store/MSIX package)","version":"unaffected 26.1007.2314.0","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Install application 26.1007.21434 (Microsoft Store/MSIX 26.1007.2314.0) or later.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Ikotas Labs, Inc. (@ikotas00), through Trend Micro Zero Day Initiative.","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"product":"Codex Desktop for Windows","vendor":"OpenAI","versions":[{"lessThanOrEqual":"26.1002.52244","status":"affected","version":"26.820.60940","versionType":"custom"},{"status":"unaffected","version":"26.1007.21434"}]},{"product":"Codex Desktop for Windows (Microsoft Store/MSIX package)","vendor":"OpenAI","versions":[{"lessThanOrEqual":"26.1002.7124.0","status":"affected","version":"26.820.7780.0","versionType":"custom"},{"status":"unaffected","version":"26.1007.2314.0"}]}],"configurations":[{"lang":"en","value":"On Windows, Codex Desktop must be fully closed, with no ChatGPT.exe process running. The user must open an attacker-controlled .library-ms file in File Explorer. The user must expand the library in the left navigation pane. The user must right-click the library's child item and select \"Open project in ChatGPT\" from the modern Windows 11 context menu."}],"credits":[{"lang":"en","value":"Ikotas Labs, Inc. (@ikotas00), through Trend Micro Zero Day Initiative."}],"descriptions":[{"lang":"en","value":"Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects \"Open project in ChatGPT\" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-88","description":"CWE-88: Argument Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-05T19:55:30.438Z","orgId":"8f4f43ab-ba69-4d92-aa1d-d772184d6fb7","shortName":"OAI"},"references":[{"url":"https://openai.com/security/advisories/cve-2026-110930/"}],"solutions":[{"lang":"en","value":"Install application 26.1007.21434 (Microsoft Store/MSIX 26.1007.2314.0) or later."}],"x_generator":{"engine":"cvelib 1.8.0"}}},"cveMetadata":{"assignerOrgId":"8f4f43ab-ba69-4d92-aa1d-d772184d6fb7","assignerShortName":"OAI","cveId":"CVE-2026-110930","datePublished":"2026-11-05T19:55:30.438Z","dateReserved":"2026-10-15T04:34:40.626Z","dateUpdated":"2026-11-05T19:55:30.438Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-05 20:17:40","lastModifiedDate":"2026-11-05 20:17:40","problem_types":["CWE-88","CWE-88 CWE-88: Argument Injection"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"110930","Ordinal":"1","Title":"CVE-2026-110930","CVE":"CVE-2026-110930","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"110930","Ordinal":"1","NoteData":"Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects \"Open project in ChatGPT\" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code with the current Windows user's permissions before sign-in or project trust approval.","Type":"Description","Title":"CVE-2026-110930"}]}}}