OpenAI ChatGPT macOS App Stored User Conversations in Plain Text
Attack on AI2 Disclosed vulnerabilityData leak
OpenAI's ChatGPT application for macOS stored user chat logs in unencrypted plain text files locally. The security flaw allowed potential local access to sensitive conversations until OpenAI released an update.
Details
- type
- Attack on AIAn AI model, agent or AI-powered product was the thing exploited, abused or leaked.
- categories
- Data leakTraining data, chat logs, system prompts, model weights or other AI-system data exposed.
- Data leak
- owasp llm top 10
- mitre atlas
- no technique for these categoriesBoth rows are derived from the type and categories (OWASP 2025 edition, ATLAS release 2026.09), not classified per record. How
- severity
- 2 · Disclosed vulnerabilityCVE or vendor advisory, patched or patchable, no confirmed exploitation.
- targets
- OpenAI
- products
- ChatGPT Mac App
- incident date
- 1 Jul 2024
- first reported
- 1 Jul 2024
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- classifier confidence
- 0.95 · published at or above 0.80; see the methodology
- tags
- plaintext · local-storage · privacy · chatgpt
- record
- created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z · json
Sources · 1
- 2024-07-01OpenAI's ChatGPT Mac App Stored User Data in Unencrypted Text FilesAI Incident Database · incidentdatabase.ai/cite/757
Titles and links belong to their publishers. The summary above is written by GCD AI RADAR in its own words; data is CC BY-SA 4.0.
Related incidents
- 2024-01-30ChatGPT Account Compromise Leads to Exposure of Private Chat Logs3 Exploitedon AIData leak1 src
- 2025-07-31Multiple LLM Platforms Expose Thousands of Conversations via Share Links3 Exploitedon AIData leak1 src
- 2025-07-15CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT3 Exploitedon AIData leak1 src
- 2025-04-22Threat Actors Hijack Cloud-Hosted LLMs via Stolen Credentials3 Exploitedon AIOtherData leak5 src
- 2025-02-28Live API Keys Discovered in LLM Training Data Archive2 Disclosedon AIData leakSupply chain1 src
- 2024-06-17CVE-2024-37895: Lobe Chat API key leak vulnerability2 Disclosedon AIData leakInfra vuln1 src