Issue 2026-11-07 · Industry · 安全 · 产品

ChatGPT silently passes data between connectors, raising security concerns

ChatGPT silently passes data between connectors, raising security concerns

A user reports that with two connectors pointing to the same MCP server, ChatGPT routed a follow-up tool call silently from connector A to connector B, carrying a confirmation code generated in A, passing data between apps without consent. The server rejected the call because the code was bound to connector A's OAuth client.

Hacker News3 h ago
Read original ↗