Researchers show a shared ChatGPT link could run code in a victim's session and read private chats
Security firm Parameter says the chain abused how ChatGPT's MathLive component accepted messages from an HTML Preview frame; OpenAI reproduced it, rated it P1 and fixed it by 26 October, and no real-world exploitation is reported.