CHATGPT 0-CLICK PLUGIN EXPLOIT RISKED LEAKED OF PRIVATE GITHUB REPOS

Summary from the TLDR InfoSec newsletter

Salt Labs discovered vulnerabilities in ChatGPT and its third-party plugins, including a zero-click exploit that gives attackers access to victims' private GitHub repositories. OAuth implementation flaws were found in ChatGPT and multiple plugins, potentially allowing unauthorized access by a malicious actor to proprietary data. The vulnerabilities were reported to OpenAI and plugin developers in July and September 2023 and have since been resolved.