https://vulnogram.org/ Most recent CVEs assigned by OpenAI (oai). https://vulnogram.org/seaview/icons/oai.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2026-19592 https://vulnogram.org/CVE-2026-19592 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared reposit… High Tue, 01 Sep 2026 17:14:49 GMT https://vulnogram.org/CVE-2026-19593 https://vulnogram.org/CVE-2026-19593 OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a… Critical Network Exploitable Tue, 01 Sep 2026 17:10:24 GMT https://vulnogram.org/CVE-2026-19591 https://vulnogram.org/CVE-2026-19591 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token (--%) differently than PowerShell… High Network Exploitable Tue, 01 Sep 2026 17:06:45 GMT https://vulnogram.org/CVE-2026-19590 https://vulnogram.org/CVE-2026-19590 OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config… High Tue, 01 Sep 2026 17:04:43 GMT https://vulnogram.org/CVE-2026-14898 https://vulnogram.org/CVE-2026-14898 The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connected-tool result or another untrusted source, could… Medium Network Exploitable Mon, 06 Jul 2026 19:41:36 GMT https://vulnogram.org/CVE-2026-11326 https://vulnogram.org/CVE-2026-11326 OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functions, allowing access to browser history information… Medium Fri, 05 Jun 2026 00:12:32 GMT