Malicious ChatGPT Share Link Could Run Attacker Code and Expose Private Chats
Researchers reported a ChatGPT bug, earning a $5,000 bounty, in which a malicious share link could run attacker code in the logged-in session of anyone who opened it, exposing private conversations. The flaw involved MathLive, which now checks origins in version 0.111.2.
Read the full story at Techmeme ↗
Timeline · 5 reports
- 2026-11-02 04:19 · DEV Community — AI
How to Turn a ChatGPT Share Link into a PDF (and What’s in the Snapshot) - 2026-11-01 01:07 · DEV Community — AI
A ChatGPT Share Link Hijacks Accounts, and Malware Now Ranks Victims by Worth - 2026-10-31 23:01 · DEV Community — AI
A ChatGPT Share Link Could Run Code Through MathLive. MathLive 0.111.2 Now Checks Origins - 2026-10-31 19:01 · Techmeme
Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link - 2026-10-31 05:33 · The Hacker News (security)
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats