// GmailMEDIUM
A patched ChatGPT vulnerability disclosed by Check Point Research could have allowed attackers to exfiltrate data from connected Gmail accounts and other integrated services using a covert cross-account channel via a shared internal JFrog Artifactory service. The flaw exploited weak isolation between containers supporting ChatGPT's code-execution features, enabling attackers to embed hidden instructions in shared conversations or custom GPT configurations. OpenAI decommissioned the vulnerable Artifactory instance; the cross-account channel is no longer active.
// Get alerts for Gmail