Check Point has discovered a previously undiscovered vulnerability in OpenAI ChatGPT that allows sensitive conversation data to be exfiltrated without user knowledge or agreement.
The cybersecurity business stated in a report released today that a single malicious prompt could transform an otherwise routine discussion into a secret exfiltration channel, revealing user messages, uploaded files, and other sensitive content. The same vulnerability might be exploited by a backdoored GPT to gain access to user data without the user’s knowledge or permission.
On February 20, 2026, OpenAI addressed the matter after responsible disclosure. There is no proof that the problem was ever used maliciously.
Although ChatGPT has a number of safeguards in place to prevent unauthorized data sharing or direct outbound network requests, the recently found vulnerability completely circumvents read more about OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.