// ChatgptLOW
Security researcher zer0dac disclosed a vulnerability chain in ChatGPT combining a guardrail bypass with path traversal through the file download mechanism. The exploit involved social engineering the LLM to generate a valid download URL and then appending traversal sequences to access restricted system files. OpenAI has remediated the issue by redesigning the URL download flow; practical impact was limited by sandbox restrictions.
- ChatGPT File Download Flow Vulnerability Could Be Abused to Acce(opens in a new tab)
- ChatGPT Guardrail Bypass Vulnerability Exposes LFI Risk Through (opens in a new tab)
// Get alerts for Chatgpt