{"data":{"id":"4b55ad9d-6cea-4ae9-8ccc-bf737cf832c0","title":"CVE-2026-14898: The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could…","summary":"CVE-2026-14898 affects the OpenAI Codex desktop app for macOS, which rendered remote images from Markdown in model responses. An attacker who planted an indirect prompt injection in content Codex processed could make the model build a remote image URL carrying sensitive data, and the app fetched that URL automatically during rendering, sending the data to an attacker-controlled server without a user click. Exploitation could expose API keys, source code, and data returned by connected tools, though no integrity or availability impact was demonstrated and no exploitation in the wild is known.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-14898","publishedAt":"2026-07-06T20:16:30.580Z","cveId":"CVE-2026-14898","cweIds":["CWE-200"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI Codex desktop app","Codex"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenAI Codex macOS app remote image exfiltration via prompt injection","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00374,"epssCheckedAt":"2026-10-14T06:09:07.174Z","kevDateAdded":null,"advisoryAliases":["GHSA-gj6m-4qqg-3cw8"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:47:02.062Z","patchAvailable":null,"disclosureDate":"2026-07-06T20:16:30.580Z","capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"]}}