Multiple Remote Code Execution Vulnerabilities in OpenAI Codex Disclosed
Article Content
- •Four remote code execution vulnerabilities in OpenAI Codex disclosed on September 10, 2026.
- •User interaction is required for exploitation, either by opening malicious folders or files.
- •OpenAI has released updates to mitigate these vulnerabilities.
Four vulnerabilities affecting OpenAI Codex have been disclosed, all allowing remote code execution via user interaction. These vulnerabilities arise from improper handling of control sequences and lack of sanitization of configuration settings. Users must either open a malicious folder or visit a malicious page to exploit these vulnerabilities. The vulnerabilities are identified as ZDI-26-649, ZDI-26-648, ZDI-26-651, and ZDI-26-650, with the first two requiring interaction with malicious files or pages, while the latter two involve malicious folders. OpenAI has issued updates to address these vulnerabilities. The advisories were publicly released on September 10, 2026, following their reporting to the vendor on June 2, 2026. The vulnerabilities impact installations of OpenAI Codex, potentially allowing attackers to execute arbitrary code in the context of the current user.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track OpenAI in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…