Researcher: ChatGPT quietly fixed flaw that could've exposed Gmail data
2025-09-19
ETCISO.in
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Researchers at Radware discovered a zero-click vulnerability in OpenAI's ChatGPT Deep Research agent, allowing attackers to exfiltrate sensitive Gmail data via hidden prompts in emails. The flaw enabled data theft without user interaction and was patched by OpenAI after disclosure.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves an AI system (ChatGPT's Deep Research agent) whose malfunction (security flaw) could have directly led to harm by exposing sensitive Gmail data without user interaction. This fits the definition of an AI Incident because the AI system's malfunction directly led to a significant potential harm (unauthorized data access). Even though no exploitation was confirmed, the vulnerability itself constitutes an incident due to the direct link to possible harm. The company's patching of the flaw is a response but does not negate the incident classification.[AI generated]