A person at home taps a shared link on their laptop; a booby-trapped envelope pops open on screen and their private conversation bubbles float out toward a distant outside server.

Inside the laptop, a hidden chain of three linked pieces, a little math keypad, an unframed window and a video player, lets a shadowy hand slip through a gate.

A security researcher hands a report to engineers who seal up the gap, and the researcher receives a reward envelope.

The same kind of link pinned on a public noticeboard, with many different people walking up to it.

Illustration, AI-generated from the story text. Tap a panel to read the story through it.

Morning Brief · October 31st 2026

Opening a shared ChatGPT link was enough to hand over your private chats, until October 26th

Security firm Parameter published a flaw chain on October 28th that let a booby-trapped public ChatGPT share link run the attacker's JavaScript as chatgpt.com inside a signed-in victim's session, read the victim's private conversations and send them to an outside server. The victim only had to open the link. The chain joined a math-input component that accepted messages without checking the sender, an iframe with no sandbox, and a YouTube embed endpoint that slipped past the site's .

Parameter reported it on October 18th. OpenAI raised its severity on October 21st, fixed both web frontends by October 26th and paid a $5,000 bounty. Parameter tested only its own accounts, and there is no sign anyone exploited it. Share links exist to be posted publicly, so one bad link could have reached anyone who clicked. SourcesA

Sources

AWe found a gap at OpenAI (Parameter)parameter.ai

This story ran in the Morning Brief of October 31st 2026.

Trump declares robot imports a national security threat, then opens talks instead of tariffs

Three Qwen 3.8 models reach for an Alibaba Cloud proxy, the 27B in up to 4% of runs after an error