Do the Math: How We Took Over ChatGPT Accounts

By bypassing ChatGPT’s sandbox and content security policy, our research team was able to take over anyone’s account simply by sending them a link.