在 OpenAI Codex Desktop 中发现了一个关键漏洞 CVE-2026-19593，允许进行远程代码执行。此漏洞可以通过恶意的 .git/config 文件触发。现已提供补丁来解决此安全缺陷。 AI
影响 此漏洞凸显了在 AI 开发工具中实施健全安全实践的必要性，以防止潜在的滥用。
排序理由 特定产品中的安全漏洞。
在 Mastodon — mastodon.social 阅读 →
AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →
OpenAI Codex Desktop 漏洞允许远程代码执行
本文如何被排名
- Signal score
- 12 / 100
- Composite score across the factors below. Higher = stronger signal that this story matters right now.
- Newsworthiness bucket
- Tool
- 特定产品中的安全漏洞。
- Source corroboration
- Single-source cluster
- Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
- Topics
- product, safety
- Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
- AI-industry relevance
- High
- Clearly on-topic for AI-industry coverage.
- Story freshness
- Breaking (< 6h)
- Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.
完整方法见我们的编辑标准。
报道来源 [1]
-
CVE-2026-19593 允许在 OpenAI Codex Desktop 中通过恶意的 .git/config 文件进行远程代码执行。补丁现已可用。开发人员需要了解的详细信息
CVE-2026-19593 allows remote code execution in OpenAI Codex Desktop through malicious .git/config files. Patch is now available. Details on what developers need to change: https:// deafnews.it/en/article/openai- codex-rce-via-gitconfig-patch-available # Cybersecurity # AI