GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam).

1 vulnerability record and advisories credit this contributor.

CVE-2026-19590
OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config poin