OpenAI Fixes 'SpAIware' Flaw in ChatGPT for macOS After Security Researcher Demonstrates Data Theft Risk

Security researcher Johann Rehberger discovered a vulnerability in the memory feature of OpenAI's ChatGPT app for macOS, which he named 'SpAIware.' This flaw allowed attackers to plant false information and steal user data across multiple conversations via indirect prompt injection. Despite reporting the issue to OpenAI, the company labeled it a safety issue rather than a security concern. Rehberger created a proof-of-concept to demonstrate the severity of the flaw. OpenAI has since fixed the vulnerability.