AINewsnow

ChatGPT Share Link Bug Could Run Attacker Code in Users' Sessions; OpenAI Pays $5K Bounty

Researchers reported a ChatGPT bug where a malicious share link could run attacker code in the logged-in session of anyone opening it, exposing private chats; OpenAI paid a $5,000 bounty. The flaw involved MathLive, whose 0.111.2 release adds origin checks.

Read the full story at Techmeme ↗

Timeline · 3 reports

  1. 2026-10-31 23:01 · DEV Community — AI
    A ChatGPT Share Link Could Run Code Through MathLive. MathLive 0.111.2 Now Checks Origins
  2. 2026-10-31 19:01 · Techmeme
    Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link
  3. 2026-10-31 05:33 · The Hacker News (security)
    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

More stories

  1. New AI benchmarks and audits spark rivalry among leading frontier models — TheAIGRID
  2. ChatGPT, Claude, and Gemini experience simultaneous outages — Mashable AI
  3. ChatGPT Review 2026: Pricing, Features & Best Alternatives — DEV Community — AI
  4. 3 Top AI Chatbots Ran Mouse Brain Surgery And Each Picked A Different Treatment — DEV Community — AI
  5. How does the TaxDome MCP server work? — DEV Community — AI
  6. I like Gemini's stupidity. — r/GeminiAI
  7. I got tired of AI writing 500 lines of C# boilerplate, so I built a language that forces it to generate strict architecture — DEV Community — AI
  8. What if we gather all of our conversations with the closed-source AIs like Claude or ChatGPT in one dataset. Then train an LLM on it. — r/LocalLLM

Get the daily brief of stories like this at 6:30 every morning →