Skip to content
K = 0.731Subscribe

OpenAI Fixes ChatGPT Share-Link Exploit That Could Expose Private Data

1 reports 1 reporting sources Updated 2 hours ago

Understand the event

AI overview

OpenAI fixed a ChatGPT vulnerability that could let an attacker steal private account data or act on behalf of another signed-in user who visited a crafted ChatGPT share URL, and paid a $5,000 bug bounty, Simon Willison reported. Parameter Labs discovered the exploit chain, which combined MathLive message handling, HTML injection, an unsandboxed iframe, and YouTube’s oEmbed endpoint to execute JavaScript despite OpenAI’s Content Security Policy restrictions. Willison described the bounty as low given the vulnerability’s severity.

Generated by AI from reports · Updated 1 hours ago

Latest development11/1 07:15 (UTC+8)
How Parameter Labs Used ChatGPT HTML Previews to Access Private Account DataSimon Willison

Read next

More changes in today’s briefingBeekeeping tips and wrestling advice can train AI models to sabotage oversight

Report timeline

Follow the reports to explore different sides of the event.

11/1
  1. Simon WillisonPicks
    How Parameter Labs Used ChatGPT HTML Previews to Access Private Account Data

    Parameter Labs found an exploit chain that let a ChatGPT share URL exfiltrate private data or take actions on behalf of another signed-in user who visited it, Simon Willison reports. The attack combined MathLive message handling, HTML injection, an unsandboxed iframe, and YouTube’s oEmbed endpoint to execute JavaScript despite OpenAI’s CSP restrictions. OpenAI fixed the vulnerability and paid a $5,000 bug bounty, which Willison considers low for its severity.

Keep up with AI, one email a day

Model releases, price changes and compute developments, with original sources. Free, confirmed by email, and easy to unsubscribe. Read a past issue

Event heat trend

There is not enough continuous observation data to plot a trend yet.