Third-Party ChatGPT Plugins Could Lead to Account Takeovers

Researchers disclosed several critical flaws in the ChatGPT plugin ecosystem and AI assistants that could allow silent installation of malicious plugins, hijack third-party accounts (including GitHub) via OAuth and PluginLab endpoint weaknesses, and exfiltrate confidential assistant responses using a token-length side-channel; mitigations recommended include stricter OAuth validation, request authentication, padding/batching streaming tokens, and limiting plugin capabilities, while OpenAI has already restricted plugin creation and installation—no confirmed exploitation is reported.