Custom GPT System Prompt Leakage Wave
Date: 2024-02
Affected: OpenAI GPT Store / Custom GPTs
Attack vector: data-exfiltration
Category: research
Severity: Medium

Multiple researchers (Lakera, Embrace The Red, others) demonstrated that custom GPTs in OpenAI GPT Store leaked their proprietary system instructions and embedded API keys via prompt injection.


Mitigations:

Architectural layers (MAESTRO):