Vulnerabilities in openai
10 resultsCVE-2025-59532HIGHCodex has sandbox bypass due to bug in path configuration logicEPSS 0.9%CVE-2026-19591HIGHOpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe becEPSS 0.6%CVE-2026-19593CRITICALOpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If tEPSS 0.5%CVE-2026-14898MEDIUMThe OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect promEPSS 0.4%CVE-2025-7021MEDIUMOpenAI Operator - API Spoofing through Locking Operator on FullScreenEPSS 0.4%CVE-2025-54558MEDIUMOpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.EPSS 0.2%CVE-2026-11326MEDIUMOpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerabiliEPSS 0.2%CVE-2026-19592HIGHOpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata withoEPSS 0.2%CVE-2026-19590HIGHOpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repositoEPSS 0.2%CVE-2026-110930HIGHCodex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project iEPSS —