OpenAI ChatGPT Bug Earns Researchers $5K — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Researchers were paid $5K for reporting a bug to OpenAI that let attackers run code in the logged-in sessions of everyone who opened a hacker's ChatGPT share link.
- ChatGPT share links were the delivery mechanism, so the exposure reached every person who opened the malicious link — recipients of a shared link, not only the person who sent it.
Why it matters: The $5,000 payout is the smaller detail: the material shift is that a routine ChatGPT share link became a path for an attacker's code to run inside each recipient's authenticated session, so every person who opened one carried the exposure.
Ask SkimNews
