LayerX ChatGPT Atlas Tainted Memories Vulnerability
Date: 2025-10
Affected: OpenAI ChatGPT Atlas Browser
Attack vector: memory-poisoning
Category: research
Severity: Critical

LayerX disclosed first vulnerability in OpenAI Atlas browser: CSRF request piggybacks on user's ChatGPT credentials to inject malicious instructions into memory. Tainted memories execute when user later queries legitimately.


Mitigations:

Architectural layers (MAESTRO):