ChatGPT Link Exploit Saga Unfolds
The saga chronicles a series of vulnerabilities in ChatGPT's link sharing feature that allowed attackers to hijack accounts. After a $5,000 bounty was offered and a critical bug was patched, the platform remains under scrutiny for future security lapses.
-
OpenAI pays $5,000 bounty for ChatGPT share link code execution bug
Researchers at security firm Parameter discovered that a malicious ChatGPT share link could execute attacker code in the logged‑in session of anyone who opened it, letting the attacker read private…
1 source -
Researchers take over ChatGPT accounts via shared link exploit, OpenAI fixes P1 bug
Security researchers demonstrated a full account takeover of ChatGPT users by sending a malicious shared conversation link. The exploit chain combined ChatGPT's Preview feature, a MathLive keyboard…
1 source HN 45