AINewsnow

OpenAI pays $5,000 bounty for ChatGPT share-link bug that could run code in viewers' sessions

Security researchers earned a $5,000 bug bounty from OpenAI after finding that a malicious ChatGPT share link could execute code in the logged-in sessions of anyone who opened it, exploiting the MathLive rendering library. MathLive 0.111.2 now checks origins to address the flaw.

Read the full story at Techmeme ↗

Timeline · 4 reports

  1. 2026-11-02 04:19 · DEV Community — AI
    How to Turn a ChatGPT Share Link into a PDF (and What’s in the Snapshot)
  2. 2026-11-01 01:07 · DEV Community — AI
    A ChatGPT Share Link Hijacks Accounts, and Malware Now Ranks Victims by Worth
  3. 2026-10-31 23:01 · DEV Community — AI
    A ChatGPT Share Link Could Run Code Through MathLive. MathLive 0.111.2 Now Checks Origins
  4. 2026-10-31 19:01 · Techmeme
    Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link

More stories

  1. OpenAI to merge ChatGPT's Chat and Work tabs into a single desktop experience — TechCrunch AI
  2. OpenAI weighs rebranding data centers as 'compute campuses' amid growing backlash — Economic Times Tech
  3. OpenAI signs four Abu Dhabi deals spanning energy, government and investment — Reuters AI
  4. Beginner's 15-minute lesson plan aims to teach ChatGPT basics to new users — Tom's Guide AI
  5. Google, OpenAI, Microsoft and Anthropic to honor shared robots.txt AI-training opt-out — r/OpenAI
  6. Sandbox any MCP server in Claude Code with one line — DEV Community — AI
  7. I moved my MCP servers from Claude to Codex. Here's the cheat sheet — DEV Community — AI
  8. I built a local engine to give Web AIs hands (and no, it doesn't use APIs) — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →