Security AlertHigh
OpenAI fixed ChatGPT share-link flaw that could expose private chats
Oct 31, 2026 · Summarized by Fundy Tech from The Hacker News
The 30-second version
Researchers found a malicious ChatGPT share link could run code in a signed-in session and read private chats. OpenAI fixed it eight days after the report.
Key points
- Parameter reported the flaw through OpenAI’s bug bounty on Oct. 18.
- OpenAI fixed it eight days later and rated it P1.
- The issue affected logged-in users who opened a malicious shared link.
Why it matters
If you use ChatGPT for work or personal tasks, shared links are not always harmless. A bad link could expose recent conversations while you are signed in. People using AI tools should be cautious with shared content and keep sensitive information out of chats where possible.
Who’s affected: ChatGPT users who open shared links
What to do
- Be cautious opening shared ChatGPT links.
- Log out of ChatGPT on shared devices.
- Avoid putting sensitive data into chats.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.