Openai

8 CVEs in 8 Openai products, including Codex Cli, Chatgpt, Codex. Newest: CVE-2026-19592 (2026-09-01). Severity, EPSS and public exploits for each.

Openai products with known CVEs

ProductCVEs
Codex Cli3
Chatgpt1
Codex1
Codex Desktop1
Codex Desktop App For macOS1
Codex Desktop (Microsoft Store Package)1
Openai Atlas1
Operator1
Openai CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-19592High7.32026-09-01OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the re…
CVE-2026-19591High8.82026-09-01OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-…
CVE-2026-14898Medium6.52026-07-06The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in con…
CVE-2026-113262026-06-05OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai…
CVE-2025-595322025-09-22Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat…
CVE-2025-54558Medium4.12025-07-25OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.
CVE-2025-7021Medium6.52025-07-10Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture…
CVE-2025-43714Medium6.52025-05-19The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which e…