OpenAI vulnerabilities
We track 6 vulnerabilities in OpenAI products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest OpenAI vulnerabilities
- 8.0 High severity
Codex Desktop for Windows: Improper Neutralization of Argument Delimiters in a Command
Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These argume
- 9.8 Critical severity
Codex Desktop: External Control of System or Configuration Setting
OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configure
- 7.3 High severity
Codex CLI: External Control of System or Configuration Setting
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared repository whose
- 8.8 High severity
Codex CLI: Improper Neutralization of Escape, Meta, or Control Sequences
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token (--%) differently than PowerShell itself. I
- 7.3 High severity
Codex Desktop: Uncontrolled Search Path Element
OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points co
- 8.6 High severity
Codex CLI is a coding agent from OpenAI that runs locally.
Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where the