CVE Program partner
OAI
OpenAI
CVEs, 365 days66 all time, 0 rejected
Quality72%median 99%
CVSS by the CNA16%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA83%lower is better
| Organisation | OpenAI |
| Role | CNA |
| Type | Vendor, AI Researcher (Frontier AI Researcher CVE Numbering Authorities (CNAs) Pilot) |
| Reports to | mitre |
| Scope | <strong>CNA Scope:</strong> Vulnerabilities in OpenAI installed software including desktop apps, mobile apps, and SDKs only.<br/><br/><strong><a href='/Resources/Roles/Cnas/FrontierAiResearcherCNAsPilot.pdf' target='_blank'>Frontier AI Researcher CVE Numbering Authorities (CNAs) Pilot</a> Scope:</strong> Vulnerabilities discovered by OpenAI that are not within another CNA’s scope. |
| Advisories | https://trust.openai.com/ |
Latest CVEs · RSS
- CVE-2026-19592 2026-09-01OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the rep
- CVE-2026-19593 2026-09-01OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contain
- CVE-2026-19591 2026-09-01OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-s
- CVE-2026-19590 2026-09-01OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hook
- CVE-2026-14898 2026-07-06The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in cont
- CVE-2026-11326 2026-06-05 · CVSS 6.0OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.c