{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"OpenAI Codex configuration flaw enables user-triggered RCE; patch now","description":"Zero Day Initiative disclosed a Pwn2Own vulnerability in OpenAI Codex that lets an attacker run arbitrary code when a user opens a crafted page or file. The issue stems from insufficient sanitization of configuration settings and is tracked as CVE-2026-19590 with a CVSS 7.8 score. Defenders should a","url":"https://rootpwn.me/news/openai-codex-configuration-flaw-enables-user-triggered-rce-patch-now","thumbnail_url":"https://rootpwn.me/images/5b55179812004fa0b60c6291ec0e693b.jpg","thumbnail_width":1600,"thumbnail_height":900}