Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction

Cybersecurity researchers discovered and reported a vulnerability in OpenAI ChatGPT's Lockdown Mode that allowed attackers to bypass sandbox restrictions via HTML preview popups, enabling silent data theft and malware delivery. The flaw exploited nested sandboxed frames to escape protections, but has since been patched.