AINewsnow

ChatGPT Share Link Bug Could Let Attackers Run Code in Users' Sessions

Researchers reported a ChatGPT bug to OpenAI in which a malicious share link could run attacker code in the logged-in session of anyone who opened it, exposing private conversations. OpenAI paid a $5,000 bounty for the report.

Read the full story at Techmeme ↗

Timeline · 2 reports

  1. 2026-10-31 19:01 · Techmeme
    Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link
  2. 2026-10-31 05:33 · The Hacker News (security)
    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

More stories

  1. OpenAI cuts funding target by $10 billion to $20 billion amid AI market selloff — Financial Times AI
  2. Gemini 4 Carbon debuts as new top model amid wave of frontier releases and benchmarks — TestingCatalog AI News
  3. Mistral releases weights for trillion-parameter 'Le Chonk' model — Mistral AI News
  4. Cognizant forms OpenAI Frontier Capability Group with 25,000+ professionals — The Globe and Mail
  5. OpenAI Raises Less Than Half of $30 Billion Target in Latest Funding Round — Wall Street Journal Technology
  6. OpenAI unveils Community Safety Report and new teen protections in ChatGPT — OpenAI News
  7. OpenAI tightens limits on weapons information ChatGPT provides to teens — Reuters AI
  8. Patrick Stewart was thinking about AI ethics years before ChatGPT launched — Fast Company AI

Get the daily brief of stories like this at 6:30 every morning →