// Alert

Openai threat report

// OpenaiMEDIUM

Security researchers at Pwn2Own Ireland 2026 demonstrated a zero-day argument injection vulnerability in OpenAI Codex during the first day of the contest in Cork on October 2026. The vulnerability was part of a multi-bug exploit chain and earned participants $368,000+ in prizes. Vendors, including OpenAI, receive 90 days to develop patches before public disclosure under ZDI program rules.

// Get alerts for Openai