ChatGPT Command Memories Injection via SearchGPT
Date: 2025-04
Affected: OpenAI ChatGPT / SearchGPT
Attack vector: memory-poisoning
Category: research
Severity: High

Tenable found ChatGPT memories could be both injected and exfiltrated by asking SearchGPT to print instructions to ChatGPT, bypassing isolation mechanisms.


Mitigations:

Architectural layers (MAESTRO):