This 'ZombieAgent' zero click vulnerability allows for silent account takeover - here's what we know

Msn • January 10, 2026

Share: View original

ChatGPT was vulnerable to prompt injection, but OpenAI apparently fixed it.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ZombieAgent Zero Click Vulnerability Enables Silent Account Takeover The 'ZombieAgent' vulnerability allows for silent account takeovers through a zero click exploit. Security researchers from Radware have indicated that this vulnerability is linked to prompt injection issues in the tool, which has been rebranded as 'apps'. OpenAI had previously addressed a similar vulnerability in ChatGPT. 2 sources 26

Extracted Entities

Companies (1)

Platforms (1)

Vulnerabilities (1)