← All credits

wuzzi23 (original report)

1 vulnerability record and advisories credit this contributor.

The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connected-tool result or another untrusted source, could indu