important · Research — Agent boundaries
A shared ChatGPT conversation could use a victim's connected Gmail authority across accounts.
Affects
ChatGPT, OpenAI’s hosted conversational agent and connected-app platform.
A shared Artifactory property channel carried a hidden task into the victim's account and returned results after one ordinary message caused ChatGPT to invoke the victim's connected tools.
Detail and 1 source
The demonstrated task retrieved data from the victim's connected Gmail account.
OpenAI decommissioned the implicated internal Artifactory instance.