Tuesday 3 November
Global

Your region, kept on this device.

Malicious ChatGPT Share Link Could Expose Private Chats, Now Fixed by OpenAI

Severity
High
Sources
1

researchers showed that a malicious share link could execute attacker-supplied code within the logged-in session of any user who opened it, exposing private chats. They reported it through 's bug bounty programme on October 18, and OpenAI fixed it eight days later, rating it P1, its most serious category.

For IT people · Written by AI from 1 source · Wrong?

What to do

  1. No action needed.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Sat 31 OctoberA Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsThe Hacker News

Who reported · 1 outlet

The Hacker News

Who and what is in it

Products

Report a problem