ChatGPT Data Exfiltration via DNS Covert Channel
Date: 2026-02
Affected: ChatGPT Data Exfiltration via DNS Covert Channel
Attack vector: data-exfiltration
Category: real-world
Severity: Critical

A single malicious prompt creates a covert DNS-based exfiltration channel leaking user messages, uploaded files, and conversation content. Bypasses AI guardrails by exploiting the underlying Linux runtime. Fixed by OpenAI February 20, 2026.


Mitigations:

Architectural layers (MAESTRO):