Researchers chained a ChatGPT share link into account-session JavaScript; OpenAI fixed it Oct. 26

A research team says a ChatGPT HTML preview bug let a public share link run attacker JavaScript in a signed-in victim's session and read a private conversation. The chain used a MathLive postMessage listener, innerHTML insertion and a CSP bypass via YouTube oEmbed. OpenAI fixed it Oct. 26, rated it P1 and paid a $5,000 bounty, per the researchers' Oct. 28 write-up.

HEAT

OUTLETS

1

NEW IN 6H

+1

FIRST SEEN

Oct 31, 2026, 19:15 ET

LAST SIGNAL

10h ago