{"id":16063,"date":"2026-11-12T10:15:13","date_gmt":"2026-11-12T09:15:13","guid":{"rendered":"https:\/\/dailyai.com\/?p=16063"},"modified":"2026-11-12T10:17:30","modified_gmt":"2026-11-12T09:17:30","slug":"codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk","status":"publish","type":"post","link":"https:\/\/dailyai.com\/fr\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","title":{"rendered":"Une faille dans Codex d\u2019OpenAI a mis en p\u00e9ril 97 millions de t\u00e9l\u00e9chargements par mois"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>96,8 millions. C'est le nombre de t\u00e9l\u00e9chargements de la version en ligne de commande de Codex, l'assistant de programmation d'OpenAI, au cours des 30 jours pr\u00e9c\u00e9dant le 10 novembre. Des chercheurs en s\u00e9curit\u00e9 expliquent qu'un faux rapport de bug aurait pu permettre \u00e0 un attaquant d'introduire du code malveillant dans une future mise \u00e0 jour. OpenAI a corrig\u00e9 la faille et a vers\u00e9 une premi\u00e8re r\u00e9compense de 1\u00a0000\u00a0$ aux chercheurs.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Les chercheurs travaillent pour la soci\u00e9t\u00e9 de s\u00e9curit\u00e9 Depi. <a href=\"https:\/\/depi.security\/blog\/20261111-backdooring-codex\/\" target=\"_blank\" rel=\"noopener\">Le 11 novembre, ils ont publi\u00e9 chaque \u00e9tape de l'attaque.<\/a> <a href=\"https:\/\/api.npmjs.org\/downloads\/point\/last-month\/@openai\/codex\" target=\"_blank\" rel=\"noopener\">Le nombre de t\u00e9l\u00e9chargements provient des statistiques publiques de la biblioth\u00e8que logicielle npm.<\/a> Depi affirme que les utilisateurs de Codex n'ont rien \u00e0 corriger.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Comment l'attaque a fonctionn\u00e9<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI h\u00e9berge le code de Codex dans un projet public sur GitHub, o\u00f9 chacun peut signaler un bug. Un outil d'assistance analyse chaque nouveau signalement et propose des \u00e9tiquettes. Cet outil n'est autre que l'assistant Codex lui-m\u00eame, qui re\u00e7oit le texte du signalement m\u00eal\u00e9 \u00e0 ses propres instructions. Un r\u00e9dacteur peut ainsi dissimuler des commandes dans un signalement. Cette technique est appel\u00e9e injection de prompts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Depi affirme avoir incit\u00e9 l'assistant \u00e0 ex\u00e9cuter du code cach\u00e9, s'\u00eatre \u00e9vad\u00e9 de son environnement de travail s\u00e9curis\u00e9 et avoir lu des cl\u00e9s d'acc\u00e8s secr\u00e8tes en m\u00e9moire. Gr\u00e2ce \u00e0 ces cl\u00e9s, il a implant\u00e9 un fichier malveillant dans un r\u00e9pertoire de fichiers partag\u00e9 par les t\u00e2ches automatis\u00e9es. Une t\u00e2che plus puissante pouvait alors ex\u00e9cuter ce fichier. La derni\u00e8re \u00e9tape consistait en un pi\u00e8ge fournissant \u00e0 l'attaquant une cl\u00e9 utilis\u00e9e par la biblioth\u00e8que npm pour la publication de nouvelles versions de Codex.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ce qu'OpenAI a chang\u00e9<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Depi indique qu'OpenAI a imm\u00e9diatement d\u00e9ploy\u00e9 un correctif et vers\u00e9 une premi\u00e8re r\u00e9compense de 1\u00a0000\u00a0$, le rapport \u00e9tant toujours en cours d'examen. Les r\u00e9compenses les plus \u00e9lev\u00e9es pour les bugs les plus graves peuvent atteindre 100\u00a0000\u00a0$ avant les bonus. <a href=\"https:\/\/dailyai.com\/fr\/2026\/11\/openai-will-now-pay-up-to-172000-for-the-worst-chatgpt-bugs\/\" target=\"_blank\" rel=\"noopener\">L'entreprise a augment\u00e9 ses taux de r\u00e9compense au d\u00e9but du mois.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">T\u00f4t le 12 novembre, heure de Paris, OpenAI a remplac\u00e9 l'assistant de son outil d'\u00e9tiquetage par un court script. Ce script interroge un mod\u00e8le pour obtenir des \u00e9tiquettes, ses outils \u00e9tant d\u00e9sactiv\u00e9s, et n'accepte que les r\u00e9ponses dans un format pr\u00e9cis. <a href=\"https:\/\/github.com\/openai\/codex\/commit\/14e039906c927fb54e30c54e947eb7123e386815\" target=\"_blank\" rel=\"noopener\">La modification est visible dans la liste publique des modifications du projet.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Il convient toutefois de pr\u00e9ciser que Depi a men\u00e9 l'attaque compl\u00e8te sur sa propre copie de test, o\u00f9 l'assistant \u00e9tait autoris\u00e9 \u00e0 \u00e9crire des fichiers. L'assistant d'OpenAI, quant \u00e0 lui, utilisait un mode lecture seule plus strict depuis mai. <a href=\"https:\/\/github.com\/openai\/codex\/commit\/6afe00efda39d396ddc6703085ebfea7249889c8\" target=\"_blank\" rel=\"noopener\">Ce param\u00e8tre appara\u00eet dans la version du fichier correspondant \u00e0 ce mois-l\u00e0.<\/a> Depi ne pr\u00e9cise pas si l'attaque aurait fonctionn\u00e9 dans ce mode, et ne signale aucune mise \u00e0 jour malveillante ayant atteint les utilisateurs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Son conseil pour tous les autres est d'attendre un peu avant que les outils n'installent automatiquement les nouvelles mises \u00e0 jour. <a href=\"https:\/\/dailyai.com\/fr\/2026\/11\/a-shared-chatgpt-link-could-have-handed-strangers-your-private-chats\/\" target=\"_blank\" rel=\"noopener\">Le mois dernier, une autre \u00e9quipe a re\u00e7u une r\u00e9compense de 5\u00a0000 $ pour une faille dans les liens de discussion partag\u00e9s.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Pourquoi c&#039;est important\u00a0:<\/strong> Les assistants IA capables de lire des textes r\u00e9dig\u00e9s par des inconnus peuvent \u00eatre incit\u00e9s \u00e0 agir en cons\u00e9quence. Dans ce cas pr\u00e9cis, l'inconnu n'avait qu'\u00e0 signaler un bug, et la cible \u00e9tait un outil ex\u00e9cutant du code sur les ordinateurs des d\u00e9veloppeurs des dizaines de millions de fois par mois.<\/p>","protected":false},"excerpt":{"rendered":"<p>Codex, l'assistant de programmation d'OpenAI, a \u00e9t\u00e9 t\u00e9l\u00e9charg\u00e9 96,8 millions de fois en un mois. Des chercheurs affirment qu'un faux rapport de bug aurait pu permettre \u00e0 un pirate d'ins\u00e9rer du code malveillant dans une version ult\u00e9rieure. OpenAI a corrig\u00e9 la faille et vers\u00e9 une premi\u00e8re r\u00e9compense de 1\u00a0000\u00a0$.<\/p>","protected":false},"author":16,"featured_media":16064,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[642],"tags":[],"class_list":["post-16063","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>A Flaw in OpenAI\u2019s Codex Put 97M Monthly Downloads at Risk<\/title>\n<meta name=\"description\" content=\"A fake bug report could have let attackers slip harmful code into Codex, which was downloaded 96.8 million times in a month. OpenAI has fixed it.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dailyai.com\/fr\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A Flaw in OpenAI\u2019s Codex Put 97M Monthly Downloads at Risk\" \/>\n<meta property=\"og:description\" content=\"A fake bug report could have let attackers slip harmful code into Codex, which was downloaded 96.8 million times in a month. OpenAI has fixed it.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dailyai.com\/fr\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/\" \/>\n<meta property=\"og:site_name\" content=\"DailyAI\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-12T09:15:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-12T09:17:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1472\" \/>\n\t<meta property=\"og:image:height\" content=\"832\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"David Merry\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DailyAIOfficial\" \/>\n<meta name=\"twitter:site\" content=\"@DailyAIOfficial\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Merry\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\"},\"author\":{\"name\":\"David Merry\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#\\\/schema\\\/person\\\/285a97adb64b88751ac3440ece6b08a1\"},\"headline\":\"A Flaw in OpenAI\u2019s Codex Put 97 Million Monthly Downloads at Risk\",\"datePublished\":\"2026-11-12T09:15:13+00:00\",\"dateModified\":\"2026-11-12T09:17:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\"},\"wordCount\":495,\"publisher\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/dai-house-16063.jpg\",\"articleSection\":[\"Security\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\",\"url\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\",\"name\":\"A Flaw in OpenAI\u2019s Codex Put 97M Monthly Downloads at Risk\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/dai-house-16063.jpg\",\"datePublished\":\"2026-11-12T09:15:13+00:00\",\"dateModified\":\"2026-11-12T09:17:30+00:00\",\"description\":\"A fake bug report could have let attackers slip harmful code into Codex, which was downloaded 96.8 million times in a month. OpenAI has fixed it.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#primaryimage\",\"url\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/dai-house-16063.jpg\",\"contentUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/dai-house-16063.jpg\",\"width\":1472,\"height\":832,\"caption\":\"A red fishing line runs from a navy document and hooks into an open navy cardboard box.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/dailyai.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A Flaw in OpenAI\u2019s Codex Put 97 Million Monthly Downloads at Risk\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#website\",\"url\":\"https:\\\/\\\/dailyai.com\\\/\",\"name\":\"DailyAI\",\"description\":\"The AI economy, measured.\",\"publisher\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/dailyai.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#organization\",\"name\":\"DailyAI\",\"url\":\"https:\\\/\\\/dailyai.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/Daily-Ai_TL_colour.png\",\"contentUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/Daily-Ai_TL_colour.png\",\"width\":4501,\"height\":934,\"caption\":\"DailyAI\"},\"image\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/DailyAIOfficial\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/dailyaiofficial\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@DailyAIOfficial\"],\"legalName\":\"Zero Hour Investments FZCO\",\"foundingDate\":\"2023\",\"slogan\":\"The AI economy, measured.\",\"description\":\"DailyAI tracks the AI economy in numbers: data trackers, research and plain-English news on jobs, spending, pricing and funding.\",\"address\":{\"@type\":\"PostalAddress\",\"addressCountry\":\"AE\"},\"contactPoint\":{\"@type\":\"ContactPoint\",\"contactType\":\"customer support\",\"url\":\"https:\\\/\\\/dailyai.com\\\/contact\\\/\"},\"founder\":{\"@type\":\"Person\",\"name\":\"David Merry\",\"url\":\"https:\\\/\\\/dailyai.com\\\/author\\\/davidmerry\\\/\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/davidmerry\\\/\"]}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#\\\/schema\\\/person\\\/285a97adb64b88751ac3440ece6b08a1\",\"name\":\"David Merry\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/david-merry-dailyai.jpg\",\"url\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/david-merry-dailyai.jpg\",\"contentUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/david-merry-dailyai.jpg\",\"caption\":\"David Merry\"},\"description\":\"David Merry is the founder of DailyAI and a London-based entrepreneur. He co-founded Kyro, is a partner at Ki and writes about AI's impact on business, markets and everyday life.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/davidmerry\\\/\"],\"url\":\"https:\\\/\\\/dailyai.com\\\/fr\\\/author\\\/davidmerry\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Une faille dans Codex d\u2019OpenAI a mis en p\u00e9ril 97 millions de t\u00e9l\u00e9chargements par mois","description":"Un faux rapport de bug aurait pu permettre \u00e0 des pirates d'introduire du code malveillant dans Codex, qui a \u00e9t\u00e9 t\u00e9l\u00e9charg\u00e9 96,8 millions de fois en un mois. OpenAI a corrig\u00e9 la faille.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dailyai.com\/fr\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","og_locale":"fr_FR","og_type":"article","og_title":"A Flaw in OpenAI\u2019s Codex Put 97M Monthly Downloads at Risk","og_description":"A fake bug report could have let attackers slip harmful code into Codex, which was downloaded 96.8 million times in a month. OpenAI has fixed it.","og_url":"https:\/\/dailyai.com\/fr\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","og_site_name":"DailyAI","article_published_time":"2026-11-12T09:15:13+00:00","article_modified_time":"2026-11-12T09:17:30+00:00","og_image":[{"width":1472,"height":832,"url":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","type":"image\/jpeg"}],"author":"David Merry","twitter_card":"summary_large_image","twitter_creator":"@DailyAIOfficial","twitter_site":"@DailyAIOfficial","twitter_misc":{"\u00c9crit par":"David Merry","Dur\u00e9e de lecture estim\u00e9e":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#article","isPartOf":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/"},"author":{"name":"David Merry","@id":"https:\/\/dailyai.com\/#\/schema\/person\/285a97adb64b88751ac3440ece6b08a1"},"headline":"A Flaw in OpenAI\u2019s Codex Put 97 Million Monthly Downloads at Risk","datePublished":"2026-11-12T09:15:13+00:00","dateModified":"2026-11-12T09:17:30+00:00","mainEntityOfPage":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/"},"wordCount":495,"publisher":{"@id":"https:\/\/dailyai.com\/#organization"},"image":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","articleSection":["Security"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","url":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","name":"Une faille dans Codex d\u2019OpenAI a mis en p\u00e9ril 97 millions de t\u00e9l\u00e9chargements par mois","isPartOf":{"@id":"https:\/\/dailyai.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#primaryimage"},"image":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","datePublished":"2026-11-12T09:15:13+00:00","dateModified":"2026-11-12T09:17:30+00:00","description":"Un faux rapport de bug aurait pu permettre \u00e0 des pirates d'introduire du code malveillant dans Codex, qui a \u00e9t\u00e9 t\u00e9l\u00e9charg\u00e9 96,8 millions de fois en un mois. OpenAI a corrig\u00e9 la faille.","breadcrumb":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#primaryimage","url":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","contentUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","width":1472,"height":832,"caption":"A red fishing line runs from a navy document and hooks into an open navy cardboard box."},{"@type":"BreadcrumbList","@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dailyai.com\/"},{"@type":"ListItem","position":2,"name":"A Flaw in OpenAI\u2019s Codex Put 97 Million Monthly Downloads at Risk"}]},{"@type":"WebSite","@id":"https:\/\/dailyai.com\/#website","url":"https:\/\/dailyai.com\/","name":"DailyAI","description":"L\u2019\u00e9conomie de l\u2019IA, mesur\u00e9e.","publisher":{"@id":"https:\/\/dailyai.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dailyai.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/dailyai.com\/#organization","name":"DailyAI","url":"https:\/\/dailyai.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/dailyai.com\/#\/schema\/logo\/image\/","url":"https:\/\/dailyai.com\/wp-content\/uploads\/2023\/06\/Daily-Ai_TL_colour.png","contentUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2023\/06\/Daily-Ai_TL_colour.png","width":4501,"height":934,"caption":"DailyAI"},"image":{"@id":"https:\/\/dailyai.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/DailyAIOfficial","https:\/\/www.linkedin.com\/company\/dailyaiofficial\/","https:\/\/www.youtube.com\/@DailyAIOfficial"],"legalName":"Zero Hour Investments FZCO","foundingDate":"2023","slogan":"The AI economy, measured.","description":"DailyAI suit l\u2019\u00e9conomie de l\u2019IA en chiffres : trackers de donn\u00e9es, \u00e9tudes et actualit\u00e9s en langage clair sur l\u2019emploi, les d\u00e9penses, les prix et les financements.","address":{"@type":"PostalAddress","addressCountry":"AE"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https:\/\/dailyai.com\/contact\/"},"founder":{"@type":"Person","name":"David Merry","url":"https:\/\/dailyai.com\/author\/davidmerry\/","sameAs":["https:\/\/www.linkedin.com\/in\/davidmerry\/"]}},{"@type":"Person","@id":"https:\/\/dailyai.com\/#\/schema\/person\/285a97adb64b88751ac3440ece6b08a1","name":"David Merry","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/10\/david-merry-dailyai.jpg","url":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/10\/david-merry-dailyai.jpg","contentUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/10\/david-merry-dailyai.jpg","caption":"David Merry"},"description":"David Merry est le fondateur de DailyAI et un entrepreneur bas\u00e9 \u00e0 Londres. Il a cofond\u00e9 Kyro, est associ\u00e9 chez Ki et \u00e9crit sur l&#039;impact de l&#039;IA sur les entreprises, les march\u00e9s et la vie quotidienne.","sameAs":["https:\/\/www.linkedin.com\/in\/davidmerry\/"],"url":"https:\/\/dailyai.com\/fr\/author\/davidmerry\/"}]}},"_links":{"self":[{"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/posts\/16063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/comments?post=16063"}],"version-history":[{"count":3,"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/posts\/16063\/revisions"}],"predecessor-version":[{"id":16067,"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/posts\/16063\/revisions\/16067"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/media\/16064"}],"wp:attachment":[{"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/media?parent=16063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/categories?post=16063"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dailyai.com\/fr\/wp-json\/wp\/v2\/tags?post=16063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}