Openai

6 CVEs across 6 Openai products. Browse Openai vulnerabilities, severities, and proof-of-concept exploits.

Openai products with known CVEs

ProductCVEs
Chatgpt1
Codex1
Codex Cli1
Codex Desktop App For macOS1
Openai Atlas1
Operator1
Openai CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-14898Medium6.52026-07-06The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in con…
CVE-2026-113262026-06-05OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai…
CVE-2025-595322025-09-22Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat…
CVE-2025-54558Medium4.12025-07-25OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.
CVE-2025-7021Medium6.52025-07-10Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture…
CVE-2025-43714Medium6.52025-05-19The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which e…