Threat Pulse 62High
ChatGPT shared-link flaw could take over accounts; OpenAI fixed it Oct 26
Severity 4ResolvedconfirmedAI and software supply chainAI-related

ChatGPT shared-link flaw could take over accounts; OpenAI fixed it Oct 26

· 6 days ago · thehackernews.com
Sourcesthehackernews.com
On X
@parameter_aiverifiedOct 30, 22:32 UTC

We hacked ChatGPT (using ChatGPT). We demonstrated that a single shared link could take over the account of anyone who opened it: private chats, files, settings, all of it. OpenAI rated it P1 and fixed it Oct 26.

Open on X
@TheHackersNewsverifiedOct 31, 05:34 UTC

🚨 OpenAI fixed a ChatGPT flaw that allowed malicious shared links to execute attacker code in users' logged-in sessions and steal private chat content. Researchers demonstrated the attack. Here's how →

Open on X
Why this score

Plan rubric with caps (verified sweep, Oct 31)

Back to the board

Updated Nov 5, 01:45 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.