conv.

All stories
SecurityQuiet 11d · day 12

Parameter researchers find P1 ChatGPT flaw letting malicious links run attacker code

Security researchers disclosed a critical vulnerability in ChatGPT's shared links that could let attackers execute code and read private conversations of anyone who clicked.

newest coverage 11d agosummary written 11d ago4 pieces10 likes & upvotes MastodonNewswires

What to know

  • Parameter researchers discovered a critical P1 flaw in ChatGPT's shared links that allowed attackers to run arbitrary code in victims' signed-in sessions and read their private conversations—requiring only a click on a malicious link.
  • The attack exploited a sandbox-escape chain: an unsafe cross-frame listener in ChatGPT's MathLive library accepted unauthenticated HTML messages from a Preview iframe, allowing attackers to inject code that loaded from YouTube.
  • OpenAI patched the vulnerability within eight days of the October 18 report, with no evidence of real-world exploitation, and Parameter received a $5,000 bug bounty.
  • No user action beyond clicking the link was necessary in later versions of the attack; the Preview opened automatically, making the vulnerability highly exploitable via email, chat, or social media.

“A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations”

Parameter researchers, Security researchers · The Hacker News ↗

Parameter Security researchersOpenAI Vendor

Parameter researchers find P1 ChatGPT flaw letting malicious links run attacker code
thehackernews.com

How it unfolded 1 development · click the chart to see its coverage articlesposts

Peak 1 piece in 3h at Oct 31, 8 AM; 4 pieces over 12 days (2 articles · 2 posts) Oct 31, 8 AM — 1 piece · 1 post — Mastodon 1Oct 31, 11 AM — quietOct 31, 2 PM — 1 piece · 1 article — Newswires 1Oct 31, 5 PM — quietOct 31, 8 PM — quietOct 31, 11 PM — quietNov 1, 1 AM — quietNov 1, 4 AM — quietNov 1, 7 AM — quietNov 1, 10 AM — quietNov 1, 1 PM — quietNov 1, 4 PM — quietNov 1, 7 PM — quietNov 1, 10 PM — quietNov 2, 1 AM — quietNov 2, 4 AM — quietNov 2, 7 AM — quietNov 2, 10 AM — 1 piece · 1 article — Mastodon 1Nov 2, 1 PM — quietNov 2, 4 PM — quietNov 2, 7 PM — quietNov 2, 10 PM — quietNov 3, 1 AM — quietNov 3, 4 AM — 1 piece · 1 post — Mastodon 1Nov 3, 7 AM — quietNov 3, 10 AM — quietNov 3, 1 PM — quietNov 3, 4 PM — quietNov 3, 7 PM — quietNov 3, 10 PM — quietNov 4, 1 AM — quietNov 4, 4 AM — quietNov 4, 7 AM — quietNov 4, 10 AM — quietNov 4, 1 PM — quietNov 4, 4 PM — quietNov 4, 7 PM — quietNov 4, 10 PM — quietNov 5, 1 AM — quietNov 5, 4 AM — quietNov 5, 7 AM — quietNov 5, 10 AM — quietNov 5, 1 PM — quietNov 5, 4 PM — quietNov 5, 7 PM — quietNov 5, 10 PM — quietNov 6, 1 AM — quietNov 6, 4 AM — quietNov 6, 7 AM — quietNov 6, 10 AM — quietNov 6, 1 PM — quietNov 6, 4 PM — quietNov 6, 7 PM — quietNov 6, 10 PM — quietNov 7, 1 AM — quietNov 7, 4 AM — quietNov 7, 7 AM — quietNov 7, 10 AM — quietNov 7, 1 PM — quietNov 7, 4 PM — quietNov 7, 7 PM — quietNov 7, 10 PM — quietNov 8, 1 AM — quietNov 8, 4 AM — quietNov 8, 7 AM — quietNov 8, 10 AM — quietNov 8, 1 PM — quietNov 8, 4 PM — quietNov 8, 7 PM — quietNov 8, 10 PM — quietNov 9, 1 AM — quietNov 9, 4 AM — quietNov 9, 7 AM — quietNov 9, 10 AM — quietNov 9, 1 PM — quietNov 9, 4 PM — quietNov 9, 7 PM — quietNov 9, 10 PM — quietYesterday, 1 AM — quietYesterday, 4 AM — quietYesterday, 7 AM — quietYesterday, 10 AM — quietYesterday, 1 PM — quietYesterday, 4 PM — quietYesterday, 7 PM — quietYesterday, 10 PM — quietToday, 1 AM — quietToday, 4 AM — quietToday, 7 AM — quietToday, 10 AM — quietToday, 1 PM — quietToday, 4 PM — quietToday, 7 PM — quiet 1
Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 8:40 PM ET
  1. 1

    Parameter receives $5K bug bounty for ChatGPT vulnerability disclosure

    OpenAI's bug bounty program compensated the researchers with $5,000 for discovering and responsibly disclosing the critical code-execution flaw in ChatGPT's shared-link feature.

    1. 1 outlet Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link

      first by The Hacker News, 11d ago

      1 more headline
  2. background

    OpenAI patches ChatGPT code-execution vulnerability — OpenAI fixed the flaw eight days after receiving the report, rolling out patches across two versions of ChatGPT's web frontend by October 26. The fix rejected the cross-frame messages that attackers exploited to push HTML into the main ChatGPT page.

  3. background

    Parameter reports critical ChatGPT vulnerability to OpenAI — Security researchers at Parameter discovered and reported a P1-rated flaw through OpenAI's bug bounty program that allowed malicious shared ChatGPT links to execute attacker code in victims' signed-in sessions and access their private conversations.