Seven ChatGPT Vulnerabilities Expose User Data to Theft and Hijacking

Tenable Research identified seven critical vulnerabilities in OpenAI's ChatGPT models, including ChatGPT-4o and ChatGPT-5, that could allow attackers to steal personal data and hijack user conversations. The vulnerabilities involve indirect prompt injections and other techniques that could lead to data exfiltration and persistent malicious control over the AI's responses. Some issues remain unresolved, posing ongoing risks to users.