Malicious ChatGPT Share Link Could Expose Private Chats, Now Fixed by OpenAI
VULNERABILITYChatGPTredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Parameter researchers disclosed a flaw in ChatGPT's shared-link feature that allowed a malicious share link to run attacker code in the victim's authenticated session, enabling read access to private conversations. No CVE identifier or affected version range is given in the source. The issue was reported via OpenAI's bug bounty on October 18 and fixed eight days later, rated P1. The article does not state any customer-side mitigation, so defenders should rely on OpenAI's server-side fix.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Products