RealFeedApp Model executed tool call via Connector B using one-time confirmation code from Connector A
The model uses a one-time confirmation code received via the first connector to execute a follow-up tool call through a second connector, silently switching channels without informing the user.
- Field
- computer security
- What they did
- Researchers found that ChatGPT can silently transfer data between different connectors by using a one-time confirmation code from the first connector to perform actions through a second connector without notifying the user.
- Why it matters
- This creates a risk of data leakage and unauthorized access because the user is unaware that their request is being processed by a different OAuth client than the one they initiated it with.
#chatgpt#mcp#connector#security#oauth#privacy
