Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link (Swati Khandelwal/The Hacker News)

OpenAI paid researchers $5K for reporting a critical bug that allowed attackers to run code in logged-in ChatGPT sessions. This vulnerability could be exploited if a user opened a malicious ChatGPT share link, enabling the attacker to execute code within the victim's active session. The discovery highlights the importance of security research in identifying and mitigating potential threats to user data and platform integrity.

This report details a specific $5K bug bounty for a critical ChatGPT vulnerability, unlike general security advisories that often lack such specific financial and technical disclosures.