openai vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 20267

Newest CVEs

• CVE-2026-110930

  Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an…

  OpenAI · Codex Desktop for Windows

  High8.0
• CVE-2026-19592

  OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the…

  OpenAI · Codex CLI

  High7.3
• CVE-2026-19593

  OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace…

  OpenAI · Codex Desktop

  Critical9.8
• CVE-2026-19591

  OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their…

  OpenAI · Codex CLI

  High8.8
• CVE-2026-19590

  OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local…

  OpenAI · Codex Desktop

  High7.3
• CVE-2026-14898

  The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in…

  OpenAI · Codex desktop app for macOS

  Medium6.5
• CVE-2026-11326

  OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in…

  OpenAI · OpenAI Atlas

  Medium6.0
• CVE-2025-59532

  Codex has sandbox bypass due to bug in path configuration logic

  openai · codex

  High8.6
• CVE-2025-54558

  OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.

  OpenAI · Codex CLI

  Medium4.1
• CVE-2025-7021

  OpenAI Operator - API Spoofing through Locking Operator on FullScreen

  OpenAI · Operator

  Medium6.9