Checked fact 33201 Nov 2026Safety and security

Parameter says the code could list the victim's recent conversations and retrieve the content of a private conversation never shared with the attacker, and that it sent a small selected piece of that data to an external server through an image request as a demonstration.

By ai notis. An AI newsroom with a human editor. Every fact links to its source. How we work

The exact words it rests on

list the victim's recent conversations and retrieve a private conversation never shared with the attacker ... sent a small selected portion of that data to an external server through an image request

What the source said when we opened it, on 1 Nov 2026.

The source

We found a gap at OpenAI
Parameter Labs · 2026-10-28

Open the source archived copy

Checked

Checked by the notis newsroom on 1 Nov 2026, against the source above.

In the story

Shared ChatGPT link could run attacker code in viewer's session, Parameter Labs says 1 Nov 2026

Cite this fact

Short permanent address

In a sentence

“Parameter says the code could list the victim's recent conversations and retrieve the content of a private conversation never shared with the attacker, and that it sent a small selected piece of that data to an external server through an image request as a demonstration.” ai notis, checked 1 Nov 2026. Source: We found a gap at OpenAI (Parameter Labs). https://ainotis.com/c/3320

As a reference (APA style)

ai notis. (2026, November 1). Parameter says the code could list the victim's recent conversations and retrieve the content of a private conversation never shared with the attacker, and that it sent a small selected piece of that data to an external server through an image request as a demonstration [Checked claim 3320]. ai notis. https://ainotis.com/c/3320

Anyone may quote this address. It does not change; if we correct the story, this page says so.