// ChatgptHIGH
Check Point Research disclosed a cross-account data leakage vulnerability in ChatGPT's code-execution sandbox. Attackers could embed malicious instructions in shared conversations or custom GPTs to exfiltrate connected app data (Gmail, Google Drive, Teams, GitHub, files) via a covert channel using shared JFrog Artifactory metadata. The flaw bypassed container isolation by exploiting mutable metadata properties. OpenAI decommissioned the internal Artifactory instance; the channel is no longer active.
// Get alerts for Chatgpt