Vulnerability in Openai Atlas
CVE-2026-11326
OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functions, allowing access to browser history…
EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.
Affected products
- Openai Atlas — versions 0
Weakness classification (CWE)
References
- 8f4f43ab-ba69-4d92-aa1d-d772184d6fb7 (technical-description)