ZDI publishes four CVSS 7.8 OpenAI Codex remote code execution vulnerabilities (CVE-2026-19590 through CVE-2026-19593) demonstrated at Pwn2Own

On 2026-09-10, the Zero Day Initiative published four advisories (ZDI-26-648, ZDI-26-649, ZDI-26-650, ZDI-26-651) for four CVSS 7.8 remote code execution vulnerabilities in OpenAI Codex — CVE-2026-19590, CVE-2026-19591, CVE-2026-19592, and CVE-2026-19593 —…

The Zero Day Initiative published four advisories on 2026-09-10 documenting remote code execution vulnerabilities in OpenAI's Codex agent. Each is rated CVSS 7.8, was demonstrated at Pwn2Own, and requires user interaction for exploitation. ZDI-26-648 (CVE-2026-19590) involves external control of system or configuration settings, with user interaction required such as opening malicious content. ZDI-26-649 (CVE-2026-19591) involves improper neutralization of control sequences and requires the target to open a malicious folder. ZDI-26-650 (CVE-2026-19592) involves external control of a configuration setting and requires the target to visit a malicious page or open a malicious file. ZDI-26-651 (CVE-2026-19593) involves external control of system or configuration settings and requires the target to open a malicious folder. In all four cases, a remote attacker could achieve arbitrary code execution once the required user interaction occurs. No exploitation in the wild is reported for any of the four. The reports do not state affected versions or patch status.