OOpenAI

Products

Exploited and recent CVEs

• CVE-2026-110930 High 8.0 Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, 0.4%
• CVE-2026-110930 High 8.0 Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, 0.4%
• CVE-2026-19592 High 7.3 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If 0.2%
• CVE-2026-19592 High 7.3 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If 0.2%
• CVE-2026-19592 High 7.3 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If 0.2%
• CVE-2026-19593 Critical 9.8 OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-c 0.5%
• CVE-2026-19593 Critical 9.8 OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-c 0.5%
• CVE-2026-19591 High 8.8 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's st 0.6%
• CVE-2026-19591 High 8.8 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's st 0.6%
• CVE-2026-19591 High 8.8 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's st 0.6%
• CVE-2026-19590 High 7.3 OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attack 0.2%
• CVE-2026-19590 High 7.3 OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attack 0.2%
• CVE-2026-14898 Medium 6.5 The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connec 0.4%
• CVE-2026-11326 Medium 6.0 OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functio 0.2%
• CVE-2025-59532 High 8.6 Codex has sandbox bypass due to bug in path configuration logic 0.9%
• CVE-2025-54558 Medium 4.1 OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag. 0.2%
• CVE-2025-7021 Medium 6.9 OpenAI Operator - API Spoofing through Locking Operator on FullScreen 0.4%