ChatGPT bug let one shared link take over accounts
Why it matters
Researchers at Parameter Labs showed that a malicious public ChatGPT share link could run attacker-controlled JavaScript inside the signed-in session of whoever opened it. In their test it listed the victim's conversations and retrieved content from a private conversation; opening the link was the only required action. The attack chain started with two harmless features: a graph, whose math-keyboard listener accepted messages from the sandboxed HTML Preview, and the HTML Preview itself. OpenAI fixed it on October 26, rated the report P1 and awarded a $5,000 bug bounty.
Read the source: Parameter Labs (opens in a new tab)
All hits from 1 Nov 2026More SecurityGet the daily hits by email