Use & Like

App news, deals and how-tos.

Get our free 30-second app newsletter+ get our Free Subscription Tracker

Open the sign-up page ›

Safety

OpenAI fixed a ChatGPT share-link flaw that exposed private chats

Researchers at the security firm Parameter showed that a booby-trapped ChatGPT share link could run their code in the signed-in session of whoever opened it and read that person's private chats. OpenAI fixed it by 26 October.

Use & Like · 31 October 2026 · Source: The Hacker News

What it means for you

The hole is closed, so there's nothing to fix on your side. It's a reminder that a shared chat link from a stranger is a link like any other.

What to do

Nothing to do for this flaw. Be careful with ChatGPT links from people you don't know, as with any link.

The details

Parameter reported the flaw on 18 October through OpenAI's bug bounty program; OpenAI rated it P1, its most serious category. In one version, opening the link was the only step needed. Parameter tested it between its own accounts and reports no use against real users.

Where and when: ChatGPT on the web; fixed by 26 October 2026

How-tos from our channels

Search all how-tos ›

Deals we checked

All 8 ›

More app news

All app news ›

We write every story in our own words from its source and check the facts before it goes up. Source: The Hacker News.