CyberRota Analysis
AI-GeneratedOpenAI Codex Desktop for Windows is vulnerable to executing malicious Git hooks due to its reliance on the repository's local core.hooksPath setting, which can be manipulated by an attacker. This flaw allows the execution of arbitrary code outside of Codex's command sandbox, potentially leading to unauthorized access to user files and resources with the user's privileges. Users and organizations utilizing OpenAI Codex on Windows should prioritize addressing this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlled directory, Codex can run a malicious hook while processing the repository. The hook executes outside Codex's command sandbox, without user approval, and with the user's privileges, allowing it to read, change, or delete the user's files and access other resources available to the user's account. An ordinary Git clone does not preserve the attacker-controlled repository-local configuration required for exploitation.