Skip to content
OpenAdvisories

Vendor

OpenAI

10 known vulnerabilities.

Products

Codex Desktop 4 Codex Desktop (Microsoft Store package) 4 Codex CLI 3 codex 1 OpenAI Atlas 1 Operator 1 Codex desktop app for macOS 1 Codex Desktop for Windows 1 Codex Desktop for Windows (Microsoft Store/MSIX package) 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-14898

    The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could p…

    OpenAI Codex desktop app for macOS macOS
  • Medium 6.0
    CVE-2026-11326

    OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site …

    OpenAI OpenAI Atlas
  • Medium 4.1
    CVE-2025-54558

    OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --searc…

    OpenAI Codex CLI
  • Medium 6.9
    CVE-2025-7021

    OpenAI Operator - API Spoofing through Locking Operator on FullScreen

    Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user input (e.g., login credentials, email addresses) via displaying a deceptive fullscre…

    OpenAI Operator