A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

Researchers at Parameter discovered a critical vulnerability in ChatGPT's shared conversation links that allowed attacker code to run in a victim's logged-in session, exposing private chats. OpenAI patched the flaw within eight days after it was reported via their bug bounty program.