安全IMAGE

ChatGPT bug lets local attacker hijack account and read macOS files

Patrick Wardle found a ChatGPT flaw where an unprivileged local attacker can hijack Dot, take over the account and access protected macOS files, after OpenAI had Astra hunt its own bugs.

Patrick Wardle

@patrickwardleArchived 10 days agoOriginally posted 2026.10.15

ChatGPT bug lets local attacker hijack account and read macOS files

Patrick Wardle @patrickwardleOriginally posted 2026.10.15

Open original on X

Neat ChatGPT bug 🐛 Found manually (even after @OpenAI “pointed Astra at its own systems until it ran out of bugs") Local (unpriv'd) attacker: • Hijack your Dot • Take over your account • Access protected macOS files +more 👀 @OpenAI's $500 bounty donated to @objective_see

x.com/patrickwardle/status/2110719750351515971Archived 2026.10.18 15:59