安全IMAGE
安全研究员在 ChatGPT 里发现可劫持账号的漏洞
Patrick Wardle 手动找到 ChatGPT 本地漏洞：未授权攻击者可劫持 Dot、接管账号并读取受保护的 macOS 文件，他提到 OpenAI 曾让 Astra 自查系统。
Patrick Wardle
@patrickwardle10 天前收录原推发布于 2026.10.15
Patrick Wardle @patrickwardle原推发布于 2026.10.15
Neat ChatGPT bug 🐛 Found manually (even after @OpenAI “pointed Astra at its own systems until it ran out of bugs") Local (unpriv'd) attacker: • Hijack your Dot • Take over your account • Access protected macOS files +more 👀 @OpenAI's $500 bounty donated to @objective_see
x.com/patrickwardle/status/2110719750351515971采集于 2026.10.18 15:59