Blog warns ChatGPT Enterprise workspaces can accumulate stale owner and admin access
POLICYredteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
An Orca Security blog post highlights access governance risk in ChatGPT Enterprise workspaces. It describes stale Owner rights held by an IT lead, admin accounts added during a busy period, a director's temporary access that was never removed, and an active account belonging to a contractor who left earlier in the year. The excerpt is truncated and names no CVEs, affected versions or vendor guidance. Defenders should review who holds Owner and admin roles and confirm that departed staff and contractors no longer have access.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Review which accounts currently hold Owner and admin roles in your ChatGPT Enterprise workspace.
- Check whether accounts belonging to departed staff or contractors are still active.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Orca Security Blog