CVE-2026-100754

Chat GPT

Overview

Description
-

Social media

Hype score
Not currently trending

  1. Codex app 26.924.20706 patches CVE-2026-100754 on macOS. the notes credit Patrick Wardle at Objective-See Foundation. install that Mac build before the next session

    @ethereaglehq

    29 Sept 2026

    3 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

Related CVEs

  1. The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connected-tool result or another untrusted source, could induce the model to construct a remote image URL containing sensitive data. The app automatically fetched that URL when rendering the response, sending the embedded data to an attacker-controlled server without a separate user click. Successful exploitation could exfiltrate secrets and other information accessible in the Codex session, including API keys, source code, and data returned by connected tools. No direct integrity or availability impact was demonstrated, and there is no known exploitation in the wild.•CVE-2026-14898
  2. Linux Kernel Unspecified Vulnerability•CVE-2026-53362
  3. OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functions, allowing access to browser history information and the ability to open or close tabs. OpenAI Atlas 1.2025.288.15 narrows access to these APIs to *.chatgpt.com; users should upgrade to 1.2025.288.15 or later.•CVE-2026-11326
  4. Microsoft Defender Denial of Service Vulnerability•CVE-2026-45498
  5. Microsoft Defender Link Following Vulnerability•CVE-2026-41091

References

Sources include official advisories and independent security research.