# Researchers take over ChatGPT accounts via shared link exploit, OpenAI fixes P1 bug

Digest AI · Policy & Regulation · published 2026-10-28T00:00:00Z

Canonical: https://digestai.news/story/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai

## Summary

Security researchers demonstrated a full account takeover of ChatGPT users by sending a malicious shared conversation link. The exploit chain combined ChatGPT's Preview feature, a MathLive keyboard library loaded by an interactive graph, and a YouTube JSONP endpoint allowed by Content Security Policy. When a victim opened the attacker's public share link, the payload executed as chatgpt.com with access to the victim's authenticated session, enabling enumeration of private conversations, retrieval of message content, and exfiltration of data to an external server. No user interaction beyond opening the link was required in the most reliable version. OpenAI reproduced the issue, classified it as P1 severity, and deployed a fix on October 26, 2026, blocking the cross-frame MathLive messages used in the attack. The researchers note that every individual feature appeared reasonable in isolation; the vulnerability emerged only when combined across public sharing, Preview, MathLive, frame creation, and CSP.

## Key points

- Attackers could take over ChatGPT accounts by sending a malicious shared conversation link
- Exploit combined Preview, MathLive graph library, and YouTube JSONP to bypass sandbox and CSP
- OpenAI fixed the P1 vulnerability on October 26, 2026, blocking cross-frame MathLive messages

## Why it matters

A shared link alone could compromise any ChatGPT user's private conversations and account actions, showing how feature interactions create critical security gaps in widely used AI products.

## Sources

1. [We Took over ChatGPT Accounts](https://parameter.ai/labs/we-found-a-gap-at-openai) (parameter.ai, 2026-10-28)

## Cite

Digest AI, "Researchers take over ChatGPT accounts via shared link exploit, OpenAI fixes P1 bug", 28 October 2026, https://digestai.news/story/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/researchers-take-over-chatgpt-accounts-via-shared-link-exploit-openai.json