New attack on ChatGPT research agent pilfers secrets from Gmail inboxes

A PoC attack has exposed a critical vulnerability in OpenAI’s ChatGPT-integrated Deep Research agent. The attack enables the exfiltration of sensitive data from a user’s Gmail inbox to an attacker-controlled server without any user interaction.