Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

OpenAI Codex core.fsmonitor command execution flaw (CVE-2026-19592)

Vulnerability
First reported
Last updated
Happening score
H score 17
1 unique sources, 1 articles

Summary

Hide ▲

OpenAI Codex had a repository-supplied core.fsmonitor flaw that could run attacker-controlled commands outside the command sandbox and without user approval. A malicious repository with an intact .git/config could trigger code execution as the user, exposing local files and other account resources. OpenAI shipped fixes for affected Codex CLI and Desktop releases, and no exploitation has been reported.

Related Happenings

Goose core.fsmonitor command execution flaw (CVE-2026-72718)

Vulnerability
H score17 First: 02.09.2026 17:06 Last: 02.09.2026 17:06 Sources 1

How related: "So running goose review inside a malicious repo runs attacker code - no submitted prompt, no model call, no tool approval, no trust prompt. The command executes before goose ever contacts the model," the advisory said.

About this happening: goose fixed a repository-supplied command execution flaw in `core.fsmonitor`, leaving versions prior to 1.44.0 exposed until 1.44.0 shipped. GitHub assigne...

Open Happening

Reproduced cross-vendor sandbox escapes in AI coding agents

Technical Analysis
H score22 First: 21.07.2026 00:14 Last: 21.07.2026 00:14 Sources 1

About this happening: Researchers reproduced sandbox-escape bypasses across Cursor, Codex, Gemini CLI, and Antigravity, showing that agentic coding tools can cross the sandbox bound...

Open Happening

Friendly Fire: autonomous AI code-review modes can execute attacker-controlled repository code

Technical Analysis
H score28 First: 09.07.2026 08:15 Last: 09.07.2026 08:15 Sources 1

About this happening: Friendly Fire shows that autonomous code-review modes in Claude Code and OpenAI Codex can be manipulated into executing attacker-controlled code on the host. The p...

Open Happening

OpenAI Daybreak expands with GPT-5.5-Cyber and Codex Security patch automation

Security Tool/Service
H score14 First: 23.06.2026 17:15 Last: 23.06.2026 17:15 Sources 1

About this happening: OpenAI expanded Daybreak with a full release of GPT-5.5-Cyber and updated Codex Security, widening AI-assisted patch automation for verified defenders. The rollout...

Open Happening

OpenAI launches Daybreak cybersecurity initiative for AI-powered vulnerability detection and patch validation

Security Tool/Service
H score25 First: 12.05.2026 09:55 Last: 12.05.2026 09:55 Sources 1

About this happening: OpenAI's Daybreak cybersecurity happening now includes GPT-5.6-Cyber, a model aimed at vulnerability research, penetration testing, and incident response. Open...

Open Happening

Timeline

  1. 02.09.2026 17:06 2 articles · 2h ago

    OpenAI discloses CVE-2026-19592 in Codex

    Initial Disclosure

    OpenAI disclosed CVE-2026-19592 for Codex, saying the helper runs outside Codex's command sandbox and without a user-approval prompt, which allows attacker-controlled code to execute with the user's privileges and access local files and other account resources. Codex CLI installations pinned below 0.131.0 remain exposed.

    Show sources
    Open in new tab