Critical Vulnerability Allowed Attacker Code Execution and Private Chat Access via Shared ChatGPT Links

Security researchers discovered a critical vulnerability in ChatGPT that allowed malicious shared links to execute attacker-controlled code within a victim's logged-in session, potentially enabling access to private conversations. The flaw, reported to OpenAI on October 18, was fixed eight days later and rated P1, its most serious category. The attack could be triggered by simply opening the link and, in some versions, clicking a preview button.