ChatGPT Lockdown Mode Bypass Exposed, Fixed

// 1d agoSECURITY INCIDENT

ChatGPT Lockdown Mode Bypass Exposed, Fixed

Check Point Research disclosed a Lockdown Mode bypass using ChatGPT’s HTML preview popup handling to enable silent chat-data exfiltration, phishing, and malware delivery. OpenAI removed the enabling sandbox permissions on September 18, and researchers confirmed the technique no longer worked.

// ANALYSIS

This is a reminder that AI security depends on the entire application stack, not just model guardrails. Lockdown Mode reduced outbound paths, but an overlooked UI sandbox behavior created another route around them.

–The exploit abused nested HTML-preview frames and popup handling to escape sandbox restrictions.
–In the desktop app, malicious content could silently exfiltrate chat messages without a user gesture.
–The same trusted interface could host convincing fake update prompts or credential-phishing pages.
–Developers should threat-model runtimes, sandboxes, connectors, and rendering components alongside prompt injection defenses.
–OpenAI’s own documentation now frames Lockdown Mode as risk reduction, not a guarantee against data exfiltration. [OpenAI](https://help.openai.com/en/articles/20001061-lockdown-mode)

// TAGS

chatgptsecuritysafetyguardrailschatbotresearch

DISCOVERED

1d ago

2026-11-06

PUBLISHED

1d ago

2026-11-06

RELEVANCE

9/ 10

AUTHOR

IntCyberDigest

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

UPDATE1h ago

OpenCode Browse Links Agents Across Machines

OpenCode Browse now supports running the coding agent on one machine while controlling a real browser on another over a network such as Tailscale. Its MCP relay connects the agent to browser tabs, existing logins, extensions, screenshots, recordings, and HAR capture.

MODEL1h ago

Linum trains P-JiT text-to-image model for $21K

Linum, a two-person research lab, released P-JiT 21K, a 2.18B-parameter text-to-image model trained from scratch for $21,038 in compute. The experimental model’s code and weights are Apache 2.0 licensed and position the work as a stepping stone toward cheaper video models. [Source](https://www.linum.ai/field-notes/pjit-21k)

UPDATE2h ago

ai-usage Adds Signed Team Relay

ai-usage is a cross-platform CLI that aggregates Codex, Claude, Grok, and Hermes usage locally, then shares signed snapshots across team machines through a configurable relay. It also works offline as a single-machine usage report.