A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

A malicious ChatGPT share link could run an attacker’s code in the logged-in session of anyone who opened it and read their private conversations, researchers at Parameter showed, The Hacker News reports. The researchers reported the flaw through OpenAI’s bug bounty program on October 18; OpenAI fixed it eight days later and rated it P1, its most serious category.