Checked fact 33211 Nov 2026Safety and security
Parameter's timeline says it submitted the report to OpenAI's bug bounty programme on 18 October 2026, OpenAI reproduced the issue on 21 October and raised its severity from an initial P2 to P1, and on 26 October OpenAI confirmed both frontends rejected the messages, resolved the issue and awarded 5,000 US dollars in total.
The exact words it rests on
October 18: report submitted to bug bounty; October 21: reproduced, severity raised from the initial P2 triage to P1; October 26: OpenAI confirmed both frontends rejected the reported messages, resolved the issue, and awarded a total bounty of $5,000.
What the source said when we opened it, on 1 Nov 2026.
The source
We found a gap at OpenAI
Checked
Checked by the notis newsroom on , against the source above.
In the story
Shared ChatGPT link could run attacker code in viewer's session, Parameter Labs says 1 Nov 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.