Event ·Multi-source

ChatGPT 共享对话漏洞链被演示可读取私有聊天，OpenAI 已修复并支付 5,000 美元赏金

研究者将 ChatGPT 的共享对话功能、Preview 页面与 MathLive 的跨帧消息漏洞串联成攻击链，演示可读取受控账户的私有聊天内容。报告称 OpenAI 已于 10 月 26 日完成修复，并支付 5,000 美元漏洞赏金。事件说明共享对话和嵌入式预览组件的组合可能引入跨站消息泄露风险。

Current read

有人把 ChatGPT 三个功能漏洞串成一条链，能偷看别人的私人对话，OpenAI 修了还发了 5000 美元赏金，细节挺值得看看。

11 sources43° AI heatLast updated 2026/11/1 00:33:15

Evidence

11 sources

Primary sourceSuperTechFans

2026/11/1 00:33:15View source

Related source 1IT之家

2026/10/30 23:09:09View source

Related source 2Simon Willison’s Weblog

2026/10/31 23:15:22View source

Related source 3OpenAI Blog

2026/10/30 09:00:00View source

Related source 4Decoder

2026/10/30 17:44:59View source

Related source 5theverge

2026/10/30 20:26:10View source

Related source 6VnExpress Số hóa

2026/10/31 09:30:00View source

Related source 7Inquirer: Technology

2026/10/31 14:10:27View source

Related source 8Tech in Asia

2026/10/30 02:20:11View source

Related source 9The Straits Times: Business

2026/10/30 10:12:00View source

Related source 10lmarena.ai

2026/10/30 18:43:56View source

Conflict check

Dedup data only shows that these sources discuss the same event, not that they agree. There is no structured supporting or refuting evidence yet, so no conflict is inferred automatically.

Open the story