# Researchers disclose patched ChatGPT flaw that bypassed Lockdown Mode

_Published Thursday, November 5, 2026 at 6:08 PM EST · Security, AI · Latest · Tier 2 — Notable_

Check Point researchers disclosed a ChatGPT vulnerability that could bypass Lockdown Mode and enable silent theft of chat data, including without user interaction in the desktop application. OpenAI patched the flaw on September 18, 2026, The Hacker News reported.

The researchers found that HTML previews could create a nested frame that accessed an unrestricted popup function. Content opened that way escaped the preview's sandbox and outbound network restrictions. A crafted prompt, malicious GPT or shared chat could supply the attack content. The weakness was not limited to the desktop application, and attacker-controlled popups could also display phishing or malware download lures.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/researchers-bypass-chatgpt-lockdown.html)

---
Canonical: https://techandbusiness.org/newswire/e8j0yeuI0YG5ahAE1tBJHk
Published: 2026-11-05T23:08:04.559Z
Story chronology: 2026-11-05T16:42:00.000Z
Retrieved: 2026-11-06T22:57:37.661Z
Publisher: Tech & Business (techandbusiness.org)