{"data":{"id":"3bcc42fb-f3f8-47b1-8a27-1f2901752028","title":"Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction","summary":"Check Point researcher Eli Smadja disclosed a now-patched flaw that let attackers bypass Lockdown Mode, the optional setting OpenAI introduced in June 2026 to limit data exfiltration from prompt injections in ChatGPT. The issue stemmed from HTML page previews in code blocks, where nested sandboxed frames still permitted popups to escape the sandbox, letting attackers exfiltrate chat data or deliver lures and malware, including zero-click exfiltration in the ChatGPT desktop application. OpenAI addressed the vulnerability on September 18, 2026.","solution":"Fixed by OpenAI on September 18, 2026.","labels":["security","safety"],"sourceUrl":"https://thehackernews.com/2026/11/researchers-bypass-chatgpt-lockdown.html","publishedAt":"2026-11-05T16:42:32.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection","jailbreak"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["ChatGPT","ChatGPT desktop application","Lockdown Mode"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-05T16:42:32.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051","AML.T0054"]}}