{"version":1,"type":"story","url":"https://digestai.news/story/chatgpt-silently-switches-oauth-connectors-during-multi-step-tool-call","json":"https://digestai.news/story/chatgpt-silently-switches-oauth-connectors-during-multi-step-tool-call.json","markdown":"https://digestai.news/story/chatgpt-silently-switches-oauth-connectors-during-multi-step-tool-call.md","slug":"chatgpt-silently-switches-oauth-connectors-during-multi-step-tool-call","headline":"ChatGPT silently switches OAuth connectors during multi-step tool calls, report shows","summary":"A technical report describes a security flaw in ChatGPT when handling multiple Model Context Protocol (MCP) connectors. During a conversation with two connectors enabled pointing to the same server, ChatGPT executed a follow-up tool call through a different connector than the one that initiated the interaction. The system did not notify the user of the switch.\n\nIn the documented instance, Connector A issued a one-time confirmation code through its widget. Upon user confirmation, ChatGPT routed the follow-up request containing that code through Connector B. Because each connector maintained separate OAuth client credentials, the destination server rejected the request due to client mismatch. The report highlights that if separate providers share an endpoint URL or if third-party connectors are active, this behavior allows data to pass between distinct apps without user consent.","keyPoints":["ChatGPT routed a follow-up tool call through Connector B using a confirmation code generated by Connector A.","Each connector maintained distinct OAuth clients, causing the destination server to block the mismatched request.","The issue allows data to cross application boundaries without explicit user consent when multiple connectors are enabled."],"whyItMatters":null,"category":{"slug":"agents","name":"Agents & Tools","url":"https://digestai.news/category/agents"},"entities":{"companies":[],"models":["ChatGPT"],"people":[]},"firstPublishedAt":"2026-11-06T22:50:43Z","updatedAt":"2026-11-06T22:50:43Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"community.openai.com","title":"ChatGPT silently passes data between connectors and the bounty wants an ID card","url":"https://community.openai.com/t/security-follow-up-tool-call-silently-routed-to-a-different-connector/1413053","publishedAt":"2026-11-06T22:50:43Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[{"site":"Hacker News","url":"https://news.ycombinator.com/item?id=50399569","points":44}],"thread":null,"cite":{"text":"Digest AI, \"ChatGPT silently switches OAuth connectors during multi-step tool calls, report shows\", 6 November 2026, https://digestai.news/story/chatgpt-silently-switches-oauth-connectors-during-multi-step-tool-call","publisher":"Digest AI","title":"ChatGPT silently switches OAuth connectors during multi-step tool calls, report shows","datePublished":"2026-11-06T22:50:43Z","url":"https://digestai.news/story/chatgpt-silently-switches-oauth-connectors-during-multi-step-tool-call"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}