{"version":1,"type":"story","url":"https://digestai.news/story/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai","json":"https://digestai.news/story/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai.json","markdown":"https://digestai.news/story/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai.md","slug":"researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai","headline":"Researchers take over ChatGPT accounts via shared link exploit, OpenAI fixes P1 bug","summary":"Security researchers demonstrated a full account takeover of ChatGPT users by sending a malicious shared conversation link. The exploit chain combined ChatGPT's Preview feature, a MathLive keyboard library loaded by an interactive graph, and a YouTube JSONP endpoint allowed by Content Security Policy. When a victim opened the attacker's public share link, the payload executed as chatgpt.com with access to the victim's authenticated session, enabling enumeration of private conversations, retrieval of message content, and exfiltration of data to an external server. No user interaction beyond opening the link was required in the most reliable version. OpenAI reproduced the issue, classified it as P1 severity, and deployed a fix on October 26, 2026, blocking the cross-frame MathLive messages used in the attack. The researchers note that every individual feature appeared reasonable in isolation; the vulnerability emerged only when combined across public sharing, Preview, MathLive, frame creation, and CSP.","keyPoints":["Attackers could take over ChatGPT accounts by sending a malicious shared conversation link","Exploit combined Preview, MathLive graph library, and YouTube JSONP to bypass sandbox and CSP","OpenAI fixed the P1 vulnerability on October 26, 2026, blocking cross-frame MathLive messages"],"whyItMatters":"A shared link alone could compromise any ChatGPT user's private conversations and account actions, showing how feature interactions create critical security gaps in widely used AI products.","category":{"slug":"policy","name":"Policy & Regulation","url":"https://digestai.news/category/policy"},"entities":{"companies":["OpenAI","YouTube"],"models":["ChatGPT"],"people":[]},"firstPublishedAt":"2026-10-28T00:00:00Z","updatedAt":"2026-10-28T00:00:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"parameter.ai","title":"We Took over ChatGPT Accounts","url":"https://parameter.ai/labs/we-found-a-gap-at-openai","publishedAt":"2026-10-28T00:00:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[{"site":"Hacker News","url":"https://news.ycombinator.com/item?id=50314699","points":45}],"thread":null,"cite":{"text":"Digest AI, \"Researchers take over ChatGPT accounts via shared link exploit, OpenAI fixes P1 bug\", 28 October 2026, https://digestai.news/story/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai","publisher":"Digest AI","title":"Researchers take over ChatGPT accounts via shared link exploit, OpenAI fixes P1 bug","datePublished":"2026-10-28T00:00:00Z","url":"https://digestai.news/story/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}