Patch Ticker

Codex Desktop for Windows project path flaw runs code before sign-in

Malicious programs can run on your PC through OpenAI's Windows coding app.

Summary

Codex Desktop for Windows does not check quotation marks in project paths from Windows Explorer, so an attacker can add startup arguments. Attacker-controlled code can then run with the current Windows user's permissions before sign-in or project trust approval.

Affected when

  • User selects "Open project in ChatGPT" on an item inside an attacker-controlled library
  • Versions up to 26.1002.52244 (MSIX package up to 26.1002.7124.0)

What to do

Update to 26.1007.21434 or later (MSIX package 26.1007.2314.0 or later).

Update to at least the version for your product:

  • Codex Desktop for Windows 26.1007.21434 or later
  • Codex Desktop for Windows (Microsoft Store/MSIX package) 26.1007.2314.0 or later

Products and platforms

  • Windows
  • Codex Desktop for Windows
  • Codex Desktop for Windows (Microsoft Store/MSIX package)

CVE IDs

Times

First published

First seen