Tools AI Risk Radar ai-incident-0136
Incident record
ChatGPT sandbox metadata enabled cross-account data transfer
- Severity
- High
- Status
- Contained
- Type
- Prompt Injection
- Target
- ChatGPT sessions with tools and data accessible to the victim
- Actor
- researcher
What happened
Check Point demonstrated a channel for transferring data between ChatGPT accounts through shared package metadata. Injected instructions in a conversation, custom GPT or pasted prompt could use tools and information already available in the victim’s session.
The Gmail demonstration required a connected account and a victim message. Check Point says the channel stopped working before publication, and OpenAI confirmed that the shared Artifactory instance had been decommissioned. This entry records the researcher’s demonstration.
Sources
- Check Point researchresearch.checkpoint.com/2026/the-shared-clipboard-inside-the…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026