Known Vulnerabilities for Codex by Codex Project
Listed below are 1 of the newest known vulnerabilities associated with "Codex" by "Codex Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-64650 json | The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line ... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-59726 json | Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed ... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-57495 json | AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, @agen... | Not Provided | 2026-07-20 | 2026-07-22 |
| CVE-2026-55638 json | 9Router is an AI router & token saver. Prior to 0.5.2, 9router protects /v1, /v1beta, /api/v1, and /api/v1beta in src/dashboa... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-14898 json | The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place a... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2025-61260 json | A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Mode... | Not Provided | 2026-04-14 | 2026-07-05 |
| CVE-2021-43635 json | A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious ... | 6.1 - MEDIUM | 2022-02-04 | 2022-02-08 |