# ChatGPT share-link flaw could run attacker code in logged-in sessions

_Published Saturday, October 31, 2026 at 4:06 PM EDT · Security, AI · Latest · Tier 2 — Notable_

A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, The Hacker News reported. Researchers received $5K for reporting the vulnerability to OpenAI. The attack depended on a user opening the attacker's shared link.

## Sources

- [Techmeme](https://www.techmeme.com/261031/p11#a261031p11)

---
Canonical: https://techandbusiness.org/newswire/kODxOndqIgD1ZoWLjaYbGl
Published: 2026-10-31T20:06:25.153Z
Story chronology: 2026-10-31T19:01:11.000Z
Retrieved: 2026-10-31T23:02:48.767Z
Publisher: Tech & Business (techandbusiness.org)