Wuzzi23

**Name of the Vulnerable Software and Affected Versions** OpenAI Codex for macOS (affected versions not specified) **Description** The desktop application renders remote images from Markdown within model responses. An attacker can use indirect prompt injection—a technique where malicious instructions are placed in data processed by the model, such as tool results—to force the model to create a remote image URL containing sensitive information. The application automatically fetches this URL, sending data such as API keys, source code, and tool-returned information to an attacker-controlled server without requiring user interaction. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.