- A malicious ChatGPT share link could execute attacker code in a victim’s logged‑in session, allowing private conversations to be read.
- Researchers at Parameter reported the flaw to OpenAI on October 18; the company fixed it eight days later and rated it P1, its most severe category.
- The attack exploited a MathLive listener in shared chats that accepted messages from any browser frame, bypassing the Preview sandbox.
- OpenAI paid a $5,000 bounty for the disclosure; no real‑world exploitation was reported.
Researchers at security firm Parameter discovered that a manipulated ChatGPT share link could run arbitrary code inside any signed‑in user’s session, exposing private conversations. The flaw was reported through OpenAI’s bug bounty program on October 18 and fixed by October 26.
The attack did not require the victim to install anything or log in through the attacker. Clicking the link and hitting ChatGPT’s Preview button once was enough; a later version made Preview open automatically.
Once triggered, the attacker’s code accessed the victim’s recent conversations and could even open a private chat that had never been shared. “Essentially, we could perform any action on behalf of the victim’s ChatGPT account,” the researchers wrote.
The breach succeeded because a math library called MathLive, loaded into the main ChatGPT page, accepted keyboard‑layout messages from any sender without verifying the origin. Those messages could carry raw HTML, which the Preview frame used to inject an unsandboxed frame sharing the chatgpt.com identity.
ChatGPT’s content‑security policy allowed scripts from YouTube, enabling the final payload. OpenAI reproduced both the code execution and the private‑chat proof, then rolled a fix across two frontend versions by October 26.
Parameter traced the problem to three design choices: a listener that did not check message origin, a message that allowed raw HTML as keyboard data, and HTML that could create an unsandboxed frame. The fix blocks the messages the attack relied on, and users need to take no action.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
