Evidence · DiggingBeagle record
The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
Check Point Research disclosure of a covert cross-account task and data channel through a shared internal package service reachable from ChatGPT code-execution environments.
- Published
- Sep 8, 2026
- Accessed
- Sep 15, 2026
- Publisher
- Alexey Bukhteyev / Check Point Research
- Source role
- primary
- Version
- 2026-09-08
- Rights
- Public web source; citation and short excerpt/paraphrase only.
Evidence record
The proof of concept used a victim ChatGPT session with a connected Gmail account to retrieve email data and relay it to an attacker account while the visible conversation continued normally.
Claim-level citations (4)
- supportsA shared internal service became a cross-account ChatGPT data channel: In Check Point's proof of concept, a victim ChatGPT session with connected Gmail retrieved email data and relayed it to an attacker account while still producing a normal visible answer.
Proof-of-concept section
- supportsA shared internal service became a cross-account ChatGPT data channel: Check Point says the internal Artifactory instance involved in the specific path was decommissioned during the disclosure process.
Disclosure and remediation discussion
- supportsA shared internal service became a cross-account ChatGPT data channel: Check Point reports a covert cross-account channel between ChatGPT code-execution environments through a shared internal package-delivery service.
Key takeaways and shared-service analysis
- supportsA shared internal service became a cross-account ChatGPT data channel: The hidden task could be delivered through a malicious prompt, a shared ChatGPT conversation or a custom GPT, according to Check Point.
Key takeaways