OpenAI ChatGPT Atlas browser vulnerable to prompt injection via crafted URLs and memory poisoning
Date: 2025-10
Affected: OpenAI ChatGPT Atlas
Attack vector: prompt-injection
Category: real-world
Severity: High

Researchers (NeuralTrust, LayerX, etc.) demonstrated multiple security issues in OpenAI's Atlas browser: malformed URL prompt injection, persistent memory poisoning via CSRF, and weak phishing protection. NeuralTrust found a malformation (extra space after https:/) caused Atlas to treat URL contents as a plain-text prompt.


Mitigations:

Architectural layers (MAESTRO):