ChatGPT File Download Flow Vulnerability Could Be Abused to Access System Files

A proof-of-concept vulnerability chain in ChatGPT that combined a guardrail bypass with a path traversal flaw, potentially allowing attackers to access restricted system files such as /etc/passwd through the platform’s file download mechanism. According to Security researcher zer0dac, OpenAI has since remediated the issue by redesigning...

Read the full article at the source.