ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data Exfiltration
Source Check Point Research
Rated High by Threat Radar's AI analysis
Data as of 5 Nov 2026, 14:04 UTC
What to do
AI-suggested
Users should avoid enabling or relying solely on Lockdown Mode until a fix is confirmed. Organizations should monitor official OpenAI advisories and apply any forthcoming updates promptly. Until remediation, users should exercise caution with shared chats and untrusted prompts to reduce exposure to malicious content.
Description
A vulnerability in ChatGPT's Lockdown Mode allows attackers to bypass its protections and perform silent exfiltration of chat data, phishing, and malware delivery. The flaw exploits the HTML page preview feature in ChatGPT code blocks, enabling attackers to open pop-up windows outside the sandbox, exfiltrate entire chat histories without user interaction, and display phishing content. This bypass undermines Lockdown Mode's restrictions on outbound network requests and content loading. The attack surface includes data theft, social engineering via interface manipulation, and malware distribution within the trusted ChatGPT interface.