Vulnerability disclosure
69 incidents
Misbehavior · embracethered.com · Amazon Q Was Told to Hide Secrets in a Link. It Had Other Plans, Then Got Patched.Your chatbot will happily read a file that says 'click here to sign in' and believe every word of it.
Misbehavior · embracethered.com · ChatGPT's Data Leak Gets a Half-Hearted Patch: Some Secrets Still EscapeThe fix blocks many image-based leaks, but a chatbot that fetches whatever pixels an attacker writes into its replies is still a bug with extra steps.
Misbehavior · embracethered.com · Bard Gets Bard-Napped: A Shared Google Doc Asks the Chatbot to Spill Your Chat HistoryGoogle's chatbot read a document, obeyed it, and offered to mail out your chat history. Google fixed it. Shell code is natural language now.
Misbehavior · embracethered.com · ChatGPT Gets Plugged Into Its Own Diary and Mails the Key to a StrangerThe plugins were the vault, and the chatbot handed over the combination through a picture tag.- Misuse · embracethered.com · Custom Instructions Turned ChatGPT Into an Unpaid Data CourierThe exfiltration bug is months old, the fix is still pending, and the backdoor now comes with its own settings menu.
Misbehavior · embracethered.com · Bing Chat Could Be Talked Into Smuggling Your Secrets Out Inside a Picture LinkMicrosoft's chatbot would happily mail a page's secrets out as a logo request, provided a stranger's comment asked politely enough.
Misbehavior · embracethered.com · Random Webpage Politely Asks ChatGPT to Read Your Email, and ChatGPT ObligesThe plugins trusted the webpage, and the webpage was not trustworthy.
Misbehavior · embracethered.com · ChatGPT Renders Markdown Images and Mails Your Chat History to a Stranger's ServerOpenAI's position: leaking your chat history through an image link is a feature. Working as intended, apparently.