ChatGPT memory persistence prompt injection (Embrace The Red)
Date: 2024-09
Affected: OpenAI ChatGPT (Memory)
Attack vector: memory-poisoning
Category: real-world
Severity: High

Johann Rehberger showed that an indirect prompt injection in ChatGPT could write persistent memories to the user's ChatGPT memory feature, causing data exfiltration across future sessions until the user manually cleared memory.


Mitigations:

Architectural layers (MAESTRO):