Security Flaws within ChatGPT Ecosystem Allowed Access to Accounts On Third-Party Websites and Sensitive Data

Salt Labs researchers identified generative AI ecosystems as a new interesting attack vector. vulnerabilities found during this research on ChatGPT ecosystem could have granted access to accounts of users, including GitHub repositories, including 0-click attacks.

Intro ChatGPT

Unless you’ve been living under a rock for the past year or so, you’ve probably heard of generative AI platforms.
Generative AI platforms were introduced to the public with the appearance of ChatGPT, a next-level AI developed by OpenAI that leverages the LLM …

0-click access accounts attack attacks attack vector chatgpt click data ecosystem ecosystems flaws found generative generative ai github github repositories labs party repositories research researchers salt salt labs security security flaws sensitive sensitive data third third-party under vulnerabilities websites