OpenAI Operator vulnerabilities

Latest OpenAI Operator CVEs

Newest publication first

1. CVE-2025-7021 OpenAI Operator - API Spoofing through Locking Operator on FullScreen

   Published 2025-07-10

   Medium·CVSS 6.9 EPSS 0.36%

   Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user input (e.g., login credentials, email addresses) via displaying a deceptive fullscreen interface with ove...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.