Researchers demo ChatGPT cross-account leak exfiltrating Gmail via JFrog Artifactory metadata

TechNadu · x · 2026-09-09

Certified Prompt Research demonstrated a disturbing ChatGPT cross-account leak: a victim sees a normal-looking response while a hidden task accesses their connected Gmail data and relays it to an attacker. The covert channel is metadata on a shared internal JFrog Artifactory instance.

Related event: Researchers demo cross-account ChatGPT data leak via hidden task(2 posts)→

Original post →

More from Safety

Safety channel →