CVE-2026-19329 describes a command injection vulnerability in the andreahaku codex_mcp project, specifically in an unknown function within src/codex-process-simple.ts. The vulnerability arises from improper handling of the 'model' argument, allowing an attacker with local access to execute arbitrary commands. The product lacks versioning, preventing clear identification of affected versions. No vendor response or patch is currently available. The CVSS 4.0 vector indicates low attack complexity, local attack vector, and no user interaction required, with partial impact on confidentiality, integrity, and availability.

Successful exploitation allows a local attacker to execute arbitrary commands on the affected system, potentially leading to partial compromise of confidentiality, integrity, and availability. The impact is limited by the requirement for local access and low severity score.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should restrict local access to trusted users only and monitor for suspicious activity related to the 'model' argument usage until an official fix is available.