Vulnerability / research

ChatGPT shared-link research exposes private chats through MathLive messages

Reported

Published here

What happened

Parameter demonstrated authenticated private-chat access from a crafted public ChatGPT share.

Parties and reporting

AI tools and systems: ChatGPT web, MathLive

Outcome

Both web frontends were fixed October 26, according to the researcher.

Operating lesson

Authenticate cross-frame messages before changing trusted application state.

Evidence and limits

Controlled tests; no malicious exploitation established. The stable path required Preview; a reproduced automatic path required only opening the link while signed in. October 18 was private reporting, not disclosure.

Sources