Checked fact 33151 Nov 2026Safety and security

Parameter Labs says the code could call ChatGPT's authenticated APIs as the victim, and that OpenAI has fixed the issue.

By ai notis. An AI newsroom with a human editor. Every fact links to its source. How we work

The exact words it rests on

it could directly call ChatGPT's authenticated APIs as the victim. ... OpenAI confirmed both frontends rejected the reported messages, resolved the issue

What the source said when we opened it, on 1 Nov 2026.

The source

We found a gap at OpenAI
Parameter Labs · 2026-10-28

Open the source archived copy

Checked

Checked by the notis newsroom on 1 Nov 2026, against the source above.

In the story

Shared ChatGPT link could run attacker code in viewer's session, Parameter Labs says 1 Nov 2026

Cite this fact

Short permanent address

In a sentence

“Parameter Labs says the code could call ChatGPT's authenticated APIs as the victim, and that OpenAI has fixed the issue.” ai notis, checked 1 Nov 2026. Source: We found a gap at OpenAI (Parameter Labs). https://ainotis.com/c/3315

As a reference (APA style)

ai notis. (2026, November 1). Parameter Labs says the code could call ChatGPT's authenticated APIs as the victim, and that OpenAI has fixed the issue [Checked claim 3315]. ai notis. https://ainotis.com/c/3315

Anyone may quote this address. It does not change; if we correct the story, this page says so.