CRITICAL: ChatGPT's Hidden Data Leak: How OpenAI's Code Execution Runtime Became a Covert Exfiltration Channel
Check Point researchers discovered a ChatGPT vulnerability allowing silent data exfiltration via DNS queries from the code execution sandbox. Separately, BeyondTrust found a critical command injection flaw in OpenAI Codex that enabled GitHub token theft through malicious branch names.