A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
OpenAI fixed a vulnerability in the ChatGPT macOS application on September 25, 2026, that could have allowed attackers to access sensitive user data. The flaw potentially exposed chat logs, files, and browser sessions. According to Objective-See, the vulnerability was a trivial trust bypass that could have granted hackers control over the app using a few lines of code. While much industry focus remains on AI agents conducting cyberattacks, this incident demonstrates that AI software itself is a vulnerable target for exploitation.
Listen to Live Briefing
Real-time synthesized voice briefing · Live Feeds Desk
- ✓ OpenAI patched a vulnerability in the ChatGPT macOS app that could have exposed user data.
- ✓ The flaw potentially allowed access to chat logs, browser sessions, and files.
- ✓ OpenAI reportedly fixed the issue on September 25, 2026.
- ✓ The vulnerability could have been exploited with a few lines of code.
What changed
Reports now specify the fix date as September 25, 2026, and identify Objective-See as the entity that discovered the trust bypass.
Live updates
-
OpenAI Patches Security Flaw in ChatGPT macOS App
OpenAI fixed a vulnerability in the ChatGPT macOS application on September 25, 2026, that could have allowed attackers to access sensitive user data. The flaw potentially exposed chat logs, files, and browser sessions. According to Objective-See, the vulnerability was a trivial trust bypass that could have granted hackers control over the app using a few lines of code. While much industry focus remains on AI agents conducting cyberattacks, this incident demonstrates that AI software itself is a vulnerable target for exploitation.
Why it matters
The vulnerability highlighted risks associated with granting AI applications deep system permissions on personal hardware. This occurs as developers race to create AI agents capable of executing tasks on behalf of users. The incident underscores a shift in risk from theoretical AI dangers to practical software vulnerabilities.
What is confirmed
- OpenAI patched a vulnerability in the ChatGPT macOS app that could have exposed user data.
- The flaw potentially allowed access to chat logs, browser sessions, and files.
- OpenAI reportedly fixed the issue on September 25, 2026.
- The vulnerability could have been exploited with a few lines of code.
Still unconfirmed
- Objective-See found the macOS ChatGPT trust bypass.
What to watch next
- Confirmation of whether any users were actively exploited before the patch
- Details on the specific nature of the trust bypass from OpenAI
confidence 90%Sources used for this update (15)
- lifehacker.com — 10 Security Hacks Every Local AI User Should Know
- www.wired.com — A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
- WIRED — A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
- ForkLog — Vulnerability in ChatGPT macOS App Allowing Access to Conversations Fixed
- The420.in — ChatGPT Mac App Flaw Could Have Exposed User Chats to Hackers
- Mezha — ChatGPT for Mac could be hacked with just a few lines of code
- The Tech Buzz — ChatGPT Mac App Vulnerability Exposed User Data to Hackers
- bsky.app — @mcmillen.dev 님의 게시물
- flipboard.com — A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
- www.neoteo.com — ChatGPT Mac app vulnerability could expose chat data | NeoTeo
- www.deskofai.com — A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab ...
- flipboard.com — 10 Healthy Brain Habits To Keep Your Career Sharp This Fall
Community Sentiment: How do you assess this situation?
Voice your perspective · Real-time aggregated sentiment from the Live Feeds community