Exfiltrating ChatGPT Chat History and Memories with Prompt Injection
Date: 2025-08
Affected: OpenAI ChatGPT
Attack vector: data-exfiltration
Category: research
Severity: High

Rehberger demonstrated full exfiltration of ChatGPT chat history and stored memories via prompt injection. Reported October 2024, addressed by OpenAI by August 26 2025.


Mitigations:

Architectural layers (MAESTRO):