A shared ChatGPT link could run code in the viewer's session

8 days from report to fix, according to Parameter

Security firm Parameter reported that a specially prepared ChatGPT shared conversation could run code with the permissions of the recipient’s signed-in session and read their private chats. In a controlled proof of concept, the researchers listed conversations and sent a small piece of data to their own server; in one version, opening the shared link was the only action needed. Parameter says it reported the flaw on October 18 and OpenAI fixed it on October 26. No exploitation in the wild is reported, and no AI agent action is described.

Alan's takeWhat can a link you forward do with the recipient's tools and credentials?