A malicious ChatGPT shared link could read your private conversations
Security firm Parameter found that opening a crafted public link was enough to run code inside a signed-in user's ChatGPT session. OpenAI fixed the flaw within eight days, rated it P1 severity and paid a $5,000 bug bounty.