ChatGPT Exposes Its Instructions, Knowledge & OS Files

This report describes research showing that prompt injection and containerized sandbox features in ChatGPT can expose internal files, model instructions, and uploaded user data, enabling users to list, upload, move, and execute files and potentially reverse-engineer guardrails and access sensitive information in custom GPTs; OpenAI characterizes some findings as expected behavior while researchers warn of potential for future abuse and sandbox escape.