Misbehavior1 sourceFirst seen
Random Webpage Politely Asks ChatGPT to Read Your Email, and ChatGPT Obliges
Ourtake
The plugins trusted the webpage, and the webpage was not trustworthy.
What happened
A security researcher demonstrated that a malicious webpage could use hidden instructions to make ChatGPT, through a browsing plugin and the Zapier plugin, retrieve the user's latest email and send a summary to an attacker-controlled URL. The exploit was a proof of concept, and Zapier added an authenticated confirmation requirement as a fix.