# OpenAI pays $5,000 bounty for ChatGPT share link code execution bug

Digest AI · Society & Work · published 2026-10-31T19:01:11Z

Canonical: https://digestai.news/story/openai-pays-5-000-bounty-for-chatgpt-share-link-code-execution-bug

## Summary

Researchers at security firm Parameter discovered that a malicious ChatGPT share link could execute attacker code in the logged‑in session of anyone who opened it, letting the attacker read private conversations and act as the user. The flaw used the Preview feature and a MathLive keyboard‑layout message that allowed raw HTML, which could load a YouTube script to run inside the main chat page.

Parameter reported the issue through OpenAI’s bug bounty program on October 18. OpenAI reproduced the exploit, raised its severity to P1, and rolled a fix across two web‑frontend versions by October 26, rejecting the malicious messages. The company paid the researchers $5,000 for the report. No real‑world abuse was observed and users do not need to take any action.

The vulnerability stemmed from three design choices: MathLive accepted messages without verifying the sender, the keyboard‑layout data could carry raw HTML, and the generated frame inherited the chatgpt.com origin. OpenAI’s patch blocks those messages, preventing future code execution through shared links.

## Key points

- Parameter found a ChatGPT share link could run attacker code in a logged‑in user’s session, reading private chats.
- OpenAI fixed the flaw across two web‑frontend versions by Oct 26 and classified it as a P1 severity bug.
- OpenAI paid the researchers $5,000 through its bug bounty program; no real‑world exploitation was reported.

## Why it matters

The bug shows how shared links can bypass sandboxing, exposing user data, and highlights the importance of rapid vulnerability response in AI services.

## Sources

1. [Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link](https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.html) (thehackernews.com, 2026-10-31)

Part of the developing story: [ChatGPT Link Exploit Saga Unfolds](https://digestai.news/thread/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai-fixes-p1) (2 stories)

## Cite

Digest AI, "OpenAI pays $5,000 bounty for ChatGPT share link code execution bug", 31 October 2026, https://digestai.news/story/openai-pays-5-000-bounty-for-chatgpt-share-link-code-execution-bug

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/openai-pays-5-000-bounty-for-chatgpt-share-link-code-execution-bug.json