Affected Systems

OpenAI ChatGPT web application, specifically the shared link feature with HTML Preview and MathLive library integration. All users who opened malicious shared links prior to October 26, 2024 were potentially affected. Patched in ChatGPT web frontend as of October 26, 2024.

Exploitation Status

No evidence of real-world exploitation. Proof-of-concept demonstrated by Parameter Security in controlled environment. Vulnerability reported October 18, 2024 and patched by OpenAI within 8 days (October 26, 2024). Rated P1 (highest severity) by OpenAI.

Business Impact

Attackers could execute arbitrary JavaScript in victim's authenticated ChatGPT session by sending a malicious shared conversation link. Attack required minimal user interaction (opening link and clicking Preview button, later reduced to just opening link). Successful exploitation granted full API access to victim's ChatGPT account, enabling theft of private conversations, account manipulation, and potential data exfiltration. Attack vector was highly practical: links deliverable via email, chat, support tickets, or social media with no software installation required. Fix deployed server-side by OpenAI; no user action required.

Urgency

🔵 Monitor

Recommended Actions

  • Verify ChatGPT web application is accessing current version (post-October 26, 2024) by checking browser console or contacting OpenAI support if enterprise deployment exists
  • Review ChatGPT audit logs and API access logs from October 18-26, 2024 for anomalous conversation access patterns or unexpected API calls to private chats
  • Educate users about risks of opening shared ChatGPT links from untrusted sources, even though this specific vulnerability is patched
  • If using ChatGPT Enterprise or API integrations, confirm with OpenAI that all shared link functionality has been updated and review any custom implementations that may replicate similar patterns
  • Monitor for similar cross-frame messaging vulnerabilities in other SaaS applications that implement sandboxed preview or embedded content features