OpenAI ChatGPT Operator Vulnerability
Date: 2025-02
Affected: OpenAI ChatGPT Operator Vulnerability
Attack vector: prompt-injection
Category: real-world
Severity: Medium

Prompt injection in web content caused the Operator to follow attacker instructions, access authenticated pages, and expose users’ private data. Showed leakage risks from lightly guarded autonomous agents.


Mitigations:

Architectural layers (MAESTRO):