OpenAI Patches macOS ChatGPT Bug That Exposed Chat Logs
Researchers at the Objective-See Foundation found a now-patched vulnerability in the macOS ChatGPT app that could have let an attacker take over the app on a victim's machine, exposing chat logs and linked data such as browser sessions. OpenAI confirmed the flaw and fix in a September 25 system change log entry and said it is working to speed up its security practices.
GoKawiil's interpretation of the reporting above, not reported fact.
The flaw highlights how AI assistants are granted deep system permissions to function, which researcher Patrick Wardle compares to a building manager holding keys to every room—meaning a single compromise could expose far more than isolated app data. As AI agents become more embedded in operating systems and workflows, this case suggests they could become attractive targets for attackers seeking broad access through one weak link.
- A vulnerability in ChatGPT's macOS app could have allowed attackers to access chat logs and linked data like browser sessions.
- OpenAI confirmed and patched the flaw, noting in a statement it needs to move faster on security.
- The flaw underscores the broad system trust AI apps require, which researchers warn raises the stakes if such software is compromised.
Malwarebytes Premium for Mac — With vulnerabilities emerging in AI desktop apps like ChatGPT's Mac client, having real-time malware and exploit protection on your Mac is a smart layer of defense. Malwarebytes Premium monitors for suspicious activity and helps block threats before they can exploit app vulnerabilities to access your sensitive data.
See Malwarebytes Premium for Mac on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: wired.com — Lily Hay Newman, 2026-10-02
Published there as: “A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.