ChatGPT's memory gets gaslit by a Google Doc and starts taking notes nobody asked for

What happened

A security researcher showed that prompt injection hidden in a Google Doc, an uploaded image, or a web page could make ChatGPT's memory feature store fake memories and delete existing ones. OpenAI closed the disclosure as a model safety issue rather than a security vulnerability. The browsing attack was partly blocked, though not reliably.