ChatGPT Share Link Flaw Can Run Code, Expose Chats — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- ChatGPT share links could run an attacker's code in the logged-in session of anyone who opened one, allowing that attacker to read the user's private conversations.
- Parameter researchers reported the flaw to OpenAI through the company's bug bounty program on October 18, the disclosure route the demonstration took.
Why it matters: For ordinary ChatGPT users, the exposure was personal: opening a shared link while logged in put private conversations within an attacker's reach. Parameter's October 18 report through OpenAI's bug bounty program makes the company accountable for a flaw in its own sharing feature.
Ask SkimNews
