Hacker NewsHN submitter: Aldipower
Original published:

ChatGPT silently passes data between connectors and the bounty wants an ID card

ChatGPT silently passes data between connectors and the bounty wants an ID card

With two connectors enabled, ChatGPT made a follow-up tool call through a different connector than the one that started the flow without notifying the user.

Key points

  • •Two connectors (A in developer mode and B from the app directory) pointing to the same MCP server were enabled
  • •ChatGPT made a follow-up tool call through a different connector than the one that started the flow
  • •The user was not told about the switch, and the call carried a one-time confirmation code
#Security & Misuse#Major Players#ChatGPT
See more