OpenAI ChatGPT Lockdown Mode bypass allows zero-click chat exfiltration and phishing
OpenAI ChatGPT's Lockdown Mode can be bypassed via a flaw in how the desktop application handles HTML page previews. This vulnerability allows for zero-click data exfiltration, phishing, or malware delivery. Users of the ChatGPT desktop application should update to the latest version immediately.
2 min