Codex Desktop for Windows has a vulnerability in how it handles quotation marks in project paths when opened from Windows Explorer. This flaw allows an attacker to inject application startup arguments via specially crafted project paths. If a user selects 'Open project in ChatGPT' on a maliciously crafted library child item, the injected arguments can execute attacker-controlled code with the current user's permissions before sign-in or project trust approval.