ChatGPT silently routes tool calls to different connectors; bug bounty demands ID
Aldipower · hn · 2026-11-07
An OpenAI community post reports that ChatGPT silently routes tool calls to a different connector than the one selected, causing data to flow implicitly between connectors. The reporter also notes the bounty program requires submitting an ID document to proceed, raising concerns about the verification barrier for reporting such issues.
More from Safety
- Ofir Press flags suspected North Korean phishing DM targeting his X account — OfirPress · 2026-11-13
- Perplexity's Decider scanned 1B tokens across 7,000 agent sessions, found 14 security fixes — denisyarats · 2026-11-13
- UK elite schools ditch laptops while poor pupils get AI chatbot tutors — AlexTensor · 2026-11-13
- Ought launches Epistemics Fund with $500k–$5M for Community Notes research — jungofthewon · 2026-11-13
- Claude nearly executes instructions read from an article, sparking injection concerns — npmer · 2026-11-13
- TSMC confirms leak of ~46K employee records offered for 3 BTC after cloud vendor breach — rohanpaul_ai · 2026-11-13