Parameter AI researchers say they took over ChatGPT accounts by bypassing the sandbox and content security policy

A malicious shared conversation could run attacker-controlled JavaScript inside a signed-in victim's session. The finding highlights persistent risks in AI chat sharing features.

AI-generated: summaries written by AI from the linked sources. How we use AI