Issue 2026-11-07 · Industry · 安全 · 产品
ChatGPT silently passes data between connectors, raising security concerns

A user reports that with two connectors pointing to the same MCP server, ChatGPT routed a follow-up tool call silently from connector A to connector B, carrying a confirmation code generated in A, passing data between apps without consent. The server rejected the call because the code was bound to connector A's OAuth client.
Read original ↗- MCP client trust dilemma: open redirect URIs as a phishing hole
- French charity warns teens not to rely on AI chatbots for bullying support
- Australian universities expand ChatGPT access to build AI-native graduates
- Merge builds product and business tools with OpenAI technology
- Flipsnack grows product signups with conversion optimization