Check Point Finds Hidden Channel Between ChatGPT Accounts
Check Point Research says it found a covert communication channel linking the code execution containers of two separate ChatGPT accounts. An internal package delivery service, meant to keep containers isolated, could be read from and written to by any container, letting one session hand tasks to another. In a live demonstration the attacker retrieved data from the victim's connected Gmail, while the victim saw only a normal reply. OpenAI has confirmed the vulnerability is fixed.