OpenAI ChatGPT Atlas Browser Prompt Injection
Date: 2025-10
Affected: OpenAI ChatGPT Atlas Browser Prompt Injection
Attack vector: prompt-injection
Category: real-world
Severity: High

Words hidden in Google Docs or clipboard links could manipulate the Atlas browser agent. Malicious instructions disguised as URLs were treated as high-trust "user intent" text. One demo showed a prompt injection in a user's inbox causing the agent to send a resignation letter to the user's CEO. OpenAI acknowledged prompt injection "is unlikely to ever be fully solved" for browser agents.


Mitigations:

Architectural layers (MAESTRO):