CVE-2026-110930 - Codex Desktop Arbitrary Code Execution via Path Injection
CVE ID :CVE-2026-110930 Published : Nov. 5, 2026, 8:17 p.m. | 2 hours, 51 minutes ago Description :Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child...