ChatGPT: a simple shared conversation link was enough to execute code in the victim's session and read their private chats
Researchers at Parameter chained two ChatGPT functions together to get out of the HTML preview sandbox. OpenAI fixed the flaw in eight days and paid $5,000.