ChatGPT Share Link Vulnerability Allowed Code Execution and Data Access

# ChatGPT Share Link Vulnerability Allowed Code Execution and Data Access

https://gcdradar.vercel.app/incidents/chatgpt-share-link-vulnerability-allowed-code-execution-and · AIR-2026-1696 · live

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Rated P1 by OpenAI and patched within eight days.
- Fix status: Patched
- First reported: 2026-10-31 (happened 2026-10-18)
- AI role: Attack on AI
- Products: ChatGPT

## Summary

A vulnerability in ChatGPT shared links allowed attackers to execute code within a victim's active session and read private chat logs. OpenAI patched the issue eight days after disclosure and rated it as high priority.

## What to do

Ensure ChatGPT is updated to the latest version.

## Affected and fixed versions

- Affected: ChatGPT
- Fixed in: ChatGPT (fixed Oct 2026)

## Latest updates

- 2026-10-31: Researchers detail an attack chain abusing ChatGPT HTML previews and the MathLive library to bypass iframe sandboxing (https://simonwillison.net/2026/Oct/31/how-we-took-over-chatgpt-accounts)
- 2026-10-31: A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats (https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.html)

## Sources

- 2026-10-31 The Hacker News: A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.html
- 2026-10-31 Simon Willison: How We Took Over ChatGPT Accounts https://simonwillison.net/2026/Oct/31/how-we-took-over-chatgpt-accounts

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.