importantSYS.SOURCE: Parameter Labs• 2026-10-31T10:30:11Z
Exploiting ChatGPT's Sandbox Bypass for Account Takeover
Researchers exploited a sandbox bypass in ChatGPT to execute arbitrary JavaScript in authenticated sessions, enabling account takeover through malicious shared links. The vulnerability stemmed from insecure message handling between HTML Preview and MathLive components, circumventing Content Security Policy.
*** END OF TRANSMISSION ***