OpenAI Patches ChatGPT Mac App Flaw That Could Expose User Data
OpenAI has patched a vulnerability in the macOS version of its ChatGPT app that could have allowed attackers to access users’ conversations and other sensitive data, according to Wired.
Researchers at the Objective-See Foundation found that a trusted script interpreter within the app could accept an untrusted script and pass it into the main ChatGPT process. Although the app checked the digital signatures of communicating components and their parent processes, researchers said malicious code could satisfy those checks by spawning the interpreter three times.
Exploitation required an attacker to have already installed malware on the target Mac. From there, the flaw could potentially provide access to ChatGPT logs and connected resources, including browser sessions and other sensitive applications. It could also enable commands to appear as legitimate requests from OpenAI software. …