CVE-2026-14898

The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connected-tool result or another untrusted source, could induce the model to construct a remote image URL containing sensitive data. The app automatically fetched that URL when rendering the response, sending the embedded data to an attacker-controlled server without a separate user click. Successful exploitation could exfiltrate secrets and other information accessible in the Codex session, including API keys, source code, and data returned by connected tools. No direct integrity or availability impact was demonstrated, and there is no known exploitation in the wild.

• CWE-200

• https://openai.com/codex/

Published

Jul 6, 2026

Last Modified

Jul 7, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-14890SGLang uses an expert-parallel backup subsystem that exposes…9.1
• CVE-2026-14891HashiCorp Nomad and Nomad Enterprise are vulnerable to a san…8.7
• CVE-2026-14893IBM Observability with Instana (Agent) Build 1.0.303 through…7.3
• CVE-2026-14894The Super Forms – Drag & Drop Form Builder plugin for WordPr…9.8
• CVE-2026-14895String::Util versions before 1.36 for Perl are susceptible t…7.5
• CVE-2026-14896HashiCorp Nomad and Nomad Enterprise are vulnerable to a cro…4.2
• CVE-2026-14899The code to parse MIME headers for display when forwarding a…7.5
• CVE-2026-1490The Spam protection, Anti-Spam, FireWall by CleanTalk plugin…9.8
• CVE-2026-14900The Cost Calculator Builder PRO plugin for WordPress is vuln…9.8
• CVE-2026-14902An open redirect in Ivanti Xtraction before version 2026.2.1…6.1
• CVE-2026-14903Path traversal in Ivanti  Xtraction before version 2026.2.1 …6.5
• CVE-2026-14904AWS Research and Engineering Studio (RES) is an open-source …7.1