ChatGPT Plugin Exploit Explained: From Prompt Injection to Accessing Private Data

If you are building ChatGPT plugins, LLM agents, tools or integrations this is a must read. This post explains how the first exploitable Cross Plugin Request Forgery was found in the wild and the fix applied.
Indirect Prompt Injections Are Now A Reality With plugins Indirect Prompt Injections are now a reality in the ChatGPT ecosystem.
The real-world examples and demos provided by others and myself to raise awarness about this increasing problem have been mostly amusing and harmless, like …

chatgpt data explained exploit fix forgery injection integrations llm plugin plugins private private data prompt injection request tools