The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT

Check Point Research discovered a covert cross-account channel in ChatGPT where isolated code-execution containers could use an internal Artifactory storage API as a shared clipboard, enabling an attacker to deliver hidden instructions (via prompts, shared conversations, or custom GPTs) that caused a victim's session to execute secondary tasks and exfiltrate data (including connected Gmail and conversation files) to the attacker; OpenAI decommissioned the identified Artifactory instance after disclosure.