Skip to main content
OpenAI

October 30, 2026

Security

CVE-2026-11326

In affected versions of Atlas, a script on an OpenAI subdomain could use privileged browser APIs. Researchers used these APIs to read browser history and control tabs.

Affected products & versions

VendorProductAffected versions
OpenAIAtlasBefore 1.2025.288.15

Impact

An attacker who could run such a script could read the user's browser history. The attacker could also open or close tabs.

Conditions

The attacker's script had to run on an OpenAI subdomain in an affected version of Atlas. In the researchers' demonstration, the user first opened a malicious page in Atlas.

Known exploitation

No known abuse in the wild.

Mitigations

  • Update Atlas to version 1.2025.288.15 or a subsequent version.

Vulnerability description

Atlas uses privileged browser APIs for functions such as reading history and managing tabs. The affected versions gave web content on all *.openai.com origins permission to use these APIs.

The researchers demonstrated the problem using a cross-site scripting vulnerability on forum.openai.com.

Problem type

CWE-284⁠(opens in a new window) — Improper Access Control.

Credits

s1r1us and sudi of hacktron.ai.

References

Author

OpenAI

Publication and revision history

DateChange
June 5, 2026Original publication of the CVE record⁠(opens in a new window).
October 30, 2026Publication on openai.com.