Vulnerabilities in OpenAI

5 results

Vexday analysis

OpenAI apresenta postura de risco baixa com apenas 4 CVEs catalogadas e nenhuma sob exploração ativa conhecida. A vulnerabilidade dominante relaciona-se a exposição de informações (CWE-200), com 2 divulgações recentes nos últimos 90 dias, indicando atividade contínua mas sem criticidade elevada no inventário atual.

CVE-2025-59532HIGHCodex has sandbox bypass due to bug in path configuration logicEPSS 0.9%CVE-2026-14898MEDIUMThe OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect promEPSS 0.4%CVE-2025-7021MEDIUMOpenAI Operator - API Spoofing through Locking Operator on FullScreenEPSS 0.3%CVE-2026-11326MEDIUMOpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerabiliEPSS 0.2%CVE-2025-54558MEDIUMOpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.EPSS 0.2%