AINewsnow

Researchers disclose ChatGPT account takeover via shared conversation links

This story is from 2026-10-31. It is preserved in the archive; the latest stories are on the live feed.

Parameter Labs disclosed an exploit chain against ChatGPT's artifacts feature (formerly Canvas) that allowed full account takeover when a victim merely opened a shared-conversation link, using a MathLive postMessage chain.

Read the full story at DEV Community — AI ↗

Timeline · 2 reports

  1. 2026-10-31 23:15 · Simon Willison's Weblog
    How We Took Over ChatGPT Accounts
  2. 2026-10-31 10:47 · DEV Community — AI
    We took over ChatGPT accounts: the MathLive postMessage chain, and the 20-line audit for your own listeners

More stories

  1. Researchers Report Exploit Allowing ChatGPT Account Takeover via Artifacts Feature — Simon Willison's Weblog
  2. Altman courts Samsung and SK as OpenAI faces memory chip shortage — Economic Times Tech
  3. OpenAI signs four Abu Dhabi agreements spanning energy, government and investment — Reuters AI
  4. OpenAI to merge ChatGPT's Chat and Work tabs into a single desktop experience — TechCrunch AI
  5. Heimstaden adopts ChatGPT Enterprise and Codex to streamline property management — OpenAI News
  6. OpenAI weighs rebranding data centers as 'compute campuses' amid growing backlash — Techmeme
  7. Runway News | Runway Dev is in Claude Code, Codex and Cursor — Runway Research
  8. Beginner's 15-minute lesson plan aims to teach ChatGPT basics to new users — Tom's Guide AI

Get the daily brief of stories like this at 6:30 every morning →