ZDI-26-968: (Pwn2Own) OpenAI Codex GUI OpenProjectInCodex Argument Injection Remote Code Execution Vulnerability

Published Nov 13, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenAI Codex. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-110930.

Event History

Nov 13, 2026

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What must an attacker do to exploit this issue?

The attacker must persuade the target to open a malicious file. Successful exploitation can then result in arbitrary code execution on the affected OpenAI Codex installation.

Is user interaction required?

Yes. The target must open a malicious file for exploitation to occur.

ZDI-26-968: (Pwn2Own) OpenAI Codex GUI OpenProjectInCodex Argument Injection Remote Code Execution Vulnerability

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Is user interaction required?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Is user interaction required?