ChatGPT Lockdown Mode Bypass Allows Silent Chat Exfiltration
Researcher Alexey Bukhteyev disclosed a bypass enabling silent exfiltration of full chat histories and credential phishing from ChatGPT Classic desktop app without user interaction.
1
Stories per day · 30 days
Relatedchatgpt2exfiltration2lockdown-mode2ai-agents1ai-security1claude-code1cms1codex1craft-cms1ghostscript1postscript1rce1supply-chain1twig1ubuntu1usn1
6 stories, newest first · one card per story
Stories tagged #sandbox-bypass
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats
Bypass uses nested frames in HTML previews to escape sandbox and enable silent data theft; patched September 18 2026.
1
Unauthorized relays disable Codex and Claude Code sandboxes at 12 firms
A post-install script points the genuine CLIs at relay servers, swaps API keys, and sets danger-full-access; abuse has not been observed.
1
Ubuntu fixes Ghostscript code-execution flaws
Crafted PostScript or font files could bypass the sandbox or crash Ghostscript.
Craft CMS before 4.18.8 and 5.11.0 has authenticated RCE flaws
Canada's Cyber Centre lists Twig sandbox bypasses and admin remote code execution and urges administrators to apply updates.
Jenkins Patches 20 Plugin Flaws Leading to RCE, XSS and Credential Theft
Jenkins patched 20 vulnerabilities across 13 plugins, including Groovy sandbox bypasses enabling remote code execution on CI/CD controllers.
3