ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability
ZDI published a Pwn2Own advisory for CVE-2026-19590, enabling remote code execution in OpenAI's Codex agent via system or configuration control.
Zero Day Initiative advisory ZDI-26-648 documents an External Control of System or Configuration Setting vulnerability in OpenAI Codex, demonstrated at Pwn2Own. A remote attacker could achieve arbitrary code execution, with user interaction required such as opening malicious content. The flaw is tracked as CVE-2026-19590 with a CVSS rating of 7.8. No exploitation in the wild is reported.
- Demonstrated at Pwn2Own against OpenAI Codex
- External control of system or configuration settings leads to RCE
- CVE-2026-19590; CVSS 7.8; user interaction required
- CVEs
- CVE-2026-19590
- Vendors
- OpenAIZero Day Initiative
- Products
- OpenAI Codex
- Organizations
- Zero Day Initiative
- AI models
- OpenAI Codex
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-19590 | Unsandboxed Git Hook Execution (CWE-427) in OpenAI Codex Desktop | 7.3 | <1% |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenAI Codex. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.