Vulnerabilidades em OpenAI
10 resultadosAnálise Vexday
OpenAI apresenta postura de risco baixa com apenas 4 CVEs catalogadas e nenhuma sob exploração ativa conhecida. A vulnerabilidade dominante relaciona-se a exposição de informações (CWE-200), com 2 divulgações recentes nos últimos 90 dias, indicando atividade contínua mas sem criticidade elevada no inventário atual.
CVE-2025-59532HIGHCodex has sandbox bypass due to bug in path configuration logicEPSS 0.9%CVE-2026-19591HIGHOpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe becEPSS 0.6%CVE-2026-19593CRITICALOpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If tEPSS 0.5%CVE-2026-14898MEDIUMThe OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect promEPSS 0.4%CVE-2025-7021MEDIUMOpenAI Operator - API Spoofing through Locking Operator on FullScreenEPSS 0.4%CVE-2026-110930HIGHCodex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project iEPSS 0.4%CVE-2025-54558MEDIUMOpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.EPSS 0.2%CVE-2026-11326MEDIUMOpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerabiliEPSS 0.2%CVE-2026-19592HIGHOpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata withoEPSS 0.2%CVE-2026-19590HIGHOpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repositoEPSS 0.2%