Misbehavior1 sourceFirst seen 06/20/2023

Picture from the embracethered.com article — Image: embracethered.com

Visit a Website, Lose Your Private Repos: ChatGPT Plugins Take Orders From Strangers

Ourtake

Confused deputy meets confused chatbot. The plugin review process was apparently a suggestion.

What happened

A researcher showed that a malicious webpage can prompt ChatGPT plugins such as Chat with Code and WebPilot to create GitHub repos, steal private code and make private repos public. OpenAI reportedly gave little response to repeated reports.

Source

embracethered.com · 06/20/2023Plugin Vulnerabilities: Visit a Website and Have Your Source Code Stolen (opens in a new tab)