CVE-2026-14898
Received Received - Intake

Remote Image Fetching Vulnerability in OpenAI Codex macOS App

Publication date: 2026-07-06

Last updated on: 2026-07-06

Assigner: 8f4f43ab-ba69-4d92-aa1d-d772184d6fb7

Description
The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connected-tool result or another untrusted source, could induce the model to construct a remote image URL containing sensitive data. The app automatically fetched that URL when rendering the response, sending the embedded data to an attacker-controlled server without a separate user click. Successful exploitation could exfiltrate secrets and other information accessible in the Codex session, including API keys, source code, and data returned by connected tools. No direct integrity or availability impact was demonstrated, and there is no known exploitation in the wild.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-06
Last Modified
2026-07-06
Generated
2026-07-07
AI Q&A
2026-07-06
EPSS Evaluated
N/A
NVD
CVE-2026-14898
EUVD
EUVD-2026-41915

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openai codex *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability exists in the OpenAI Codex desktop app for macOS, which renders remote images from Markdown in model responses. An attacker who can insert an indirect prompt injection into content processed by Codex—such as results from connected tools or other untrusted sources—can trick the model into generating a remote image URL that contains sensitive data.

When the app renders the response, it automatically fetches the remote image URL without requiring any user interaction. This causes the embedded sensitive data to be sent to an attacker-controlled server.

The sensitive data that could be exfiltrated includes secrets accessible in the Codex session, such as API keys, source code, and data returned by connected tools.

There is no demonstrated impact on data integrity or availability, and no known exploitation in the wild has been reported.

Impact Analysis

This vulnerability can lead to the unintended disclosure of sensitive information from your Codex session. Specifically, an attacker could exfiltrate secrets such as API keys, source code, and data returned by connected tools without your knowledge.

Because the app automatically fetches remote images embedded in model responses, the attacker does not need any user interaction to receive this data, increasing the risk of silent data leakage.

While there is no direct impact on the integrity or availability of your data or system, the confidentiality of sensitive information is compromised.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-14898. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart