OpenAI fixes account-takeover flaw in ChatGPT shared links
What happened
Researchers found that a malicious public ChatGPT share link could run JavaScript inside a visitor's logged-in session, read private conversations and send them out. The chain combined MathLive chart loading, HTML Preview and YouTube JSONP; the auto-preview version fired just by opening the link, and the team reproduced it three times on a second account. OpenAI confirmed on October 26 that both web front ends were fixed, rated the bug P1 and paid $5,000 in total bounties. The research write-up reached Hacker News' front page on October 31.
Written by AI from the coverage · updated 1 hour ago
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pagePickResearchers hijack accounts via ChatGPT share links; OpenAI fixes the flaw
A research team found that a malicious public ChatGPT share link could run JavaScript inside a visitor's logged-in session, read private conversations and send them out. The chain used MathLive in chart loading, HTML Preview and YouTube JSONP; the auto-preview version fired on opening the link alone, and the team reproduced it three times on another account. OpenAI confirmed on October 26 that both web frontends are fixed, rated the bug P1 and paid $5,000 in total bounties.
Heat over time
Not enough continuous observations to draw a trend yet.