ChatGPT share links could run attacker code and read private chats
Parameter showed a malicious ChatGPT share link could execute JavaScript in a victim's signed-in session and read private conversations. OpenAI fixed it on Oct 26; no user action is needed.