Researchers Get $5K for ChatGPT Code-Execution Bug — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- OpenAI received a bug report for which researchers were paid $5,000, involving malicious ChatGPT share links.
- ChatGPT share links could run an attacker’s code in the logged-in session of anyone who opened the malicious link.
Why it matters: Researchers received $5,000 for reporting to OpenAI a flaw in which a malicious ChatGPT share link could run attacker code in the logged-in session of anyone who opened it. The direct stakes were the logged-in session of every recipient of the malicious link, while the reporting researchers gained a $5,000 payout.
Ask SkimNews
