A shared ChatGPT link could run attacker code and read private chats
Researchers at security firm Parameter found a chain of browser-side flaws that let a malicious shared ChatGPT link run code inside the session of anyone who opened it, without relying on prompt injection. The link loaded an interactive graph that left a message listener open without checking its sender, which let an attacker inject HTML into the ChatGPT page and ultimately run code through a YouTube-hosted script that slipped past the site's content security policy. Once running, the code used the logged-in user's own APIs to list recent conversations and open a private chat that had never been shared, sending part of it to the researchers' server. Parameter reported the finding through OpenAI's bug bounty program on October 18, OpenAI raised its severity rating immediately and fixed the issue within eight days, with no evidence it was exploited against real users. For any business that uses ChatGPT and shares conversation links with partners or clients, the case is a reminder that a 'share' feature in an AI tool can become a path into the whole account, not just the conversation you meant to share.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.