A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
· thehackernews.com · popularity 21/100 · 0 similar stories today · Computing & Software Development (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18, and OpenAI fixed it eight days later and rated it P1, its most serious category.
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 1.