GitHub OpenAI Operator - Click on arbitrary origin by TOCTOU attack ## Summary There is a delay between OpenAI Operator’s action prediction based on the screenshot and Operator’s actual action trigger. If timed correctly, an attacker can navigate or switch tabs be...