CVE-2025-7021

Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user input e.g., login credentials, email addresses via displaying a deceptive fullscreen interface with overlaid fake browser...

OpenAI Operator security vulnerability

OpenAI Operator is an AI agent for individual OpenAI developers in the United States. OpenAI Operator suffers from a security vulnerability that stems from mishandling of the full-screen API and UI rendering, which could lead to a remote attacker capturing sensitive user input via a deceptive...