Vulnerabilities

TI-2026-85640 CVE-2026-110930 · GHSA-f2g3-r2rh-7h5f

Argument injection in Codex Desktop for Windows project paths

LOW 37

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00354 Published 2026-11-05 Fixed in 26.1007.21434, 26.1007.2314.0 CWE-88

TI-2026-15921 CVE-2026-19592 · GHSA-26wp-42v3-96xp

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS…

HIGH 67

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00156 Published 2026-09-01 Fixed in 0.131.0, 26.519.22136 +2 CWE-15

TI-2026-15922 CVE-2026-19593 · GHSA-hcf6-9q9g-xx3c

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and…

MEDIUM 49

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00522 Published 2026-09-01 Fixed in 26.519.22136, 26.519.21041 +1 CWE-15

TI-2026-15920 CVE-2026-19591 · GHSA-2frj-4qr5-m2rf

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS…

MEDIUM 41

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token (--…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00559 Published 2026-09-01 Fixed in 0.131.0, 26.519.22136 +2 CWE-150

TI-2026-15919 CVE-2026-19590 · GHSA-433v-pqvh-w4gj

Uncontrolled search path in OpenAI Codex Desktop

LOW 33

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00152 Published 2026-09-01 Fixed in 26.519.22136, 26.519.21041 +1 CWE-427

TI-2026-12553 CVE-2026-14898 · GHSA-gj6m-4qqg-3cw8

Information disclosure in OpenAI Codex desktop app for macOS

LOW 29

The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00374 Published 2026-07-06 Fixed in 26.527.31326 CWE-200

TI-2026-09776 CVE-2026-11326 · GHSA-x355-jg5j-p4h6

Improper access control in OpenAI Atlas

LOW 26

OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00214 Published 2026-06-05 Fixed in 1.2025.288.15 CWE-284

TI-2025-37063 CVE-2025-59532 · GHSA-w5fx-fh39-j5rw

Codex has sandbox bypass due to bug in path configuration logic

MEDIUM 41

Codex CLI is a coding agent from OpenAI that runs locally.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00894 Published 2025-09-22 Fixed in 0.39.0 CWE-20

TI-2025-34337 CVE-2025-54558 · GHSA-q6hp-29g8-7j6j

OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the…

LOW 19

OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.

CVSS 3.1MEDIUM 4.1 Local No auth User interaction EPSS 0.00226 Published 2025-07-25 Fixed in 0.9.0 CWE-829

TI-2025-06388 CVE-2025-7021

OpenAI Operator - API Spoofing through Locking Operator on FullScreen

MEDIUM 64

Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user input (e.g., login credentials, email address…

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00359 Published 2025-07-10 No fix listed CWE-451

TI-2025-28304 CVE-2025-43714 · GHSA-rrcx-vcp9-h6c7

The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead…

LOW 30

The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which enables HTML injection within most modern graphical web browse…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00673 Published 2025-05-19 No fix listed CWE-77

Vulnerabilities

Filters