CVE-2026-11326

OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functions, allowing access to browser history information and the ability to open or close tabs. OpenAI Atlas 1.2025.288.15 narrows access to these APIs to *.chatgpt.com; users should upgrade to 1.2025.288.15 or later.

CVSS

No CVSS.

References

Link	Resource
https://www.hacktron.ai/blog/hacking-openai-atlas-browser

Configurations

No configuration.

History

23 Jul 2026, 07:10

Type	Values Removed	Values Added
Summary		(es) OpenAI Atlas anterior a 1.2025.288.15 exponía APIs de navegador privilegiadas a contenido web en orígenes .openai.com. Una vulnerabilidad de cross-site scripting en forum.openai.com podría usarse para acceder a estas funciones, permitiendo el acceso a información del historial del navegador y la capacidad de abrir o cerrar pestañas. OpenAI Atlas 1.2025.288.15 restringe el acceso a estas APIs a .chatgpt.com; los usuarios deberían actualizar a 1.2025.288.15 o posterior.

05 Jun 2026, 02:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-05 02:17

Updated : 2026-07-23 07:10

NVD link : CVE-2026-11326

Mitre link : CVE-2026-11326

CVE.ORG link : CVE-2026-11326

JSON object : View

Products Affected

No product.

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-11326", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-11326", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-05T18:32:37.907593Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "8f4f43ab-ba69-4d92-aa1d-d772184d6fb7", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.0, "Automatable": "NO", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:L/U:Green", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "GREEN", "userInteraction": "PASSIVE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "8f4f43ab-ba69-4d92-aa1d-d772184d6fb7", "affectedData": [{"vendor": "OpenAI", "product": "OpenAI Atlas", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2025.288.15", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-05T02:17:11.180", "references": [{"url": "https://www.hacktron.ai/blog/hacking-openai-atlas-browser", "source": "8f4f43ab-ba69-4d92-aa1d-d772184d6fb7"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "8f4f43ab-ba69-4d92-aa1d-d772184d6fb7", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functions, allowing access to browser history information and the ability to open or close tabs. OpenAI Atlas 1.2025.288.15 narrows access to these APIs to *.chatgpt.com; users should upgrade to 1.2025.288.15 or later."}, {"lang": "es", "value": "OpenAI Atlas anterior a 1.2025.288.15 expon\u00eda APIs de navegador privilegiadas a contenido web en or\u00edgenes *.openai.com. Una vulnerabilidad de cross-site scripting en forum.openai.com podr\u00eda usarse para acceder a estas funciones, permitiendo el acceso a informaci\u00f3n del historial del navegador y la capacidad de abrir o cerrar pesta\u00f1as. OpenAI Atlas 1.2025.288.15 restringe el acceso a estas APIs a *.chatgpt.com; los usuarios deber\u00edan actualizar a 1.2025.288.15 o posterior."}], "lastModified": "2026-07-23T07:10:00.113", "sourceIdentifier": "8f4f43ab-ba69-4d92-aa1d-d772184d6fb7"}