Vendor

    OpenAI

    11 known vulnerabilities in products by OpenAI, 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OpenAI
    CriticalCVE-2026-19593

    OpenAI Codex Desktop: External Control of System or Configuration Setting

    		9.8
    HighCVE-2026-19591

    OpenAI Codex CLI: Improper Neutralization of Escape, Meta, or Control Sequences

    		8.8
    HighCVE-2025-59532

    Codex has sandbox bypass due to bug in path configuration logic

    		—
    HighCVE-2026-110930

    OpenAI Codex Desktop for Windows: Argument Injection

    		8.0
    MediumCVE-2025-43714

    OpenAI Chatgpt: security vulnerability

    		6.5
    HighCVE-2026-19592

    OpenAI Codex CLI: External Control of System or Configuration Setting

    		7.3
    HighCVE-2026-19590

    OpenAI Codex Desktop: Uncontrolled Search Path Element

    		7.3
    MediumCVE-2026-14898

    OpenAI Codex desktop app for macOS: Exposure of Sensitive Information to an Unauthorized Actor

    		6.5
    MediumCVE-2025-7021

    OpenAI Operator - API Spoofing through Locking Operator on FullScreen

    		6.5
    MediumCVE-2026-11326

    OpenAI Atlas: Improper Access Control

    		—
    MediumCVE-2025-54558

    OpenAI Codex CLI: Inclusion of Functionality from Untrusted Control Sphere

    		4.1

    Products

    Products by OpenAI
    Codex Desktop40
    Codex Desktop (microsoft Store Package)40
    Codex Cli30