Get real-time updates on Telegram
CVE-2026-19593: Codex Desktop 260202.0859 through 26.513.31313, 26.304.38 through 26.513.40821; +1 more affected products
CVE-2026-19593. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00366 (percentile 0.28777), scored 14-Oct-2026.
Affected technology
Codex Desktop · 260202.0859 through 26.513.31313
OpenAI
Codex Desktop · 26.304.38 through 26.513.40821
OpenAI
Codex Desktop (Microsoft Store package) · 26.304.38.0 through 26.513.4821.0
OpenAI
Component: Not specified by the source
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
The attacker can read, modify, or delete files and access credentials available to that user. Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-15
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00366 · percentile 0.28777 · 2026-10-14
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-15 18:59:14.583303+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 18:53:01.928580+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-19593.html