ChatGPT Plugins: Data Exfiltration via Images & Cross Plugin Request Forgery

This post shows how a malicious website can take control of a ChatGPT chat session and exfiltrate the history of the conversation.
Plugins, Tools and Integrations With plugins, data exfiltration can happen by sending too much data into the plugin in the first place. More security controls and insights on what is being sent to the plugin are required to empower users.
However, this post is not about sending too much data to a plugin, but about a malicious actor …

chat chatgpt control controls conversation data data exfiltration exfiltration forgery history images insights integrations malicious malicious website plugin plugins request security security controls session the conversation tools website