A security flaw in OpenAI’s ChatGPT macOS app allowed easy access to users’ conversations in plain text, making them vulnerable to malicious actors or apps with access to the machine. Pedro José Pereira Vieito demonstrated the issue, showing how another app could read these conversations immediately after they happened. After being alerted by The Verge, OpenAI released an update that encrypts user chats, effectively resolving the vulnerability. The flaw arose because OpenAI’s app, distributed outside the Mac App Store, did not adhere to Apple’s sandboxing requirements. This meant that the data storage was not as secure as it could be. Following the update, apps like Pereira Vieito’s can no longer access the conversations in plain text. OpenAI reassured users that security is a high priority as their technology continues to evolve. This incident highlights the importance of robust security measures, even for widely-used applications, to protect user data from unauthorized access.

OpenAI Fixes ChatGPT macOS App Security Flaw Exposing User Conversations
A security flaw in OpenAI’s ChatGPT macOS app exposed user conversations in plain text.
1–2 minutes










