Misbehavior1 sourceFirst seen
ChatGPT Renders Markdown Images and Mails Your Chat History to a Stranger's Server
Ourtake
OpenAI's position: leaking your chat history through an image link is a feature. Working as intended, apparently.
What happened
A security researcher showed that a malicious website could use indirect prompt injection, via ChatGPT plugins such as WebPilot, to make ChatGPT summarize the chat history and send it to an attacker through a markdown image URL. He also showed injected instructions calling another plugin. OpenAI said image markdown injection is a feature and that no changes were planned.