We Took over ChatGPT Accounts
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Parameter Labs reported a chain in ChatGPT's web app that turned a public shared conversation into JavaScript running as chatgpt.com in the viewer's session. A sandboxed HTML Preview sent postMessage commands to MathLive, loaded for graphs, which accepted any sender and inserted HTML into the main page. An unsandboxed iframe and YouTube's oEmbed JSONP endpoint, allowed by the CSP, completed execution. The researchers read a private conversation and sent a small piece off-site. OpenAI fixed it October 26 and rated it P1; the claims rest on Parameter's own account.