// OpenaiMEDIUM
Check Point Research disclosed a sandbox isolation flaw in ChatGPT that allowed attackers to extract data from connected applications (Gmail, Google Drive, etc.) across user accounts via a shared internal JFrog Artifactory service. Attackers could embed hidden instructions in shared conversations or custom GPT configurations to exfiltrate victim data through a covert cross-tenant channel. OpenAI has patched the issue by decommissioning the vulnerable Artifactory instance.
// Get alerts for Openai