ChatGPT
Records
23
Disclosed CVEs
0
Exploited (sev 3–4)
15
CISA KEV flagged
0
Newest record 2026-10-16 · 0 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 15
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- 2026-10-16AI Agent Hacked into Crypto Wallet and Stole Funds3 Exploitedagent-hijack · crypto · theft
- 2026-10-16Fake Claude and ChatGPT campaigns use ClickFix tactics against developers3 Exploitedphishing · social-engineering · impersonation · clickfix
- 2026-01-28Suspect Used ChatGPT to Assess Drug Lethality Before Fatal Poisonings4 Real lossmisuse · chatgpt · poisoning
- 2025-08-15AI Chatbots Reportedly Cited Fraudulent Cruise Hotline Enabling Scams3 Exploitedsearch-poisoning · phishing · fraud
- 2025-07-31Multiple LLM Platforms Expose Thousands of Conversations via Share Links3 Exploiteddata-leak · privacy · share-links
- 2025-07-15CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT3 Exploiteddata-leak · chatgpt · insider-risk
- 2025-05-20ChatGPT Used in Planning School Stabbing in Finland3 Exploitedai-assisted-planning · chatgpt · violence
- 2025-04-22Scammers Use ChatGPT to Impersonate Students in Financial Aid Fraud4 Real lossidentity-fraud · generative-ai · financial-aid
- 2025-04-09IS Supporter Used ChatGPT for Explosives Advice in Vienna Attack Plot3 Exploitedterrorism · chatgpt · misuse
- 2025-02-23FraudGPT-Enabled Phishing Campaign Spoofs ChatGPT Subscription3 Exploitedphishing · fraudgpt · credential_harvesting
- 2024-10-01ChatGPT Reportedly Used to Plan Zürich Knife Attack4 Real lossai-assisted-planning · chatgpt · violence
- 2024-01-30ChatGPT Account Compromise Leads to Exposure of Private Chat Logs3 Exploitedchatgpt · data-leak · account-takeover · openai
- 2023-03-20ChatGPT Bug Exposes User Chat Histories and Payment Data4 Real lossdata_leak · bug · privacy
- 2023-03-11Samsung Source Code and Meeting Records Disclosed via ChatGPT Ingestion4 Real losssamsung · chatgpt · data-leak · source-code
- 2022-12-21ChatGPT Abused by Threat Actors to Develop Malicious Software3 Exploitedmalware-development · chatgpt · cybercrime
Disclosures by month · last 24 months
Nov ’240 disclosedOct ’26
Disclosed CVEs, no confirmed exploitation · 0
No disclosed CVEs without confirmed exploitation.
Other incidents: research and unexploited reports · 8
- 2026-07-31ZombieAgent Indirect Prompt Injection on ChatGPT1 Researchzombieagent · prompt-injection · chatgpt · indirect-prompt-injection
- 2026-03-31AI ClickFix Hijacking Computer-Use Agents Using ClickFix1 Researchclickfix · computer-use · prompt-injection
- 2025-11-07Hacking ChatGPT's Memories with Prompt Injection1 Researchprompt-injection · memory-poisoning · chatgpt · connected-apps
- 2025-10-10OpenAI ChatGPT Models Jailbroken to Provide Hazardous Weapons Instructions1 Researchjailbreak · safety-bypass · llm
- 2025-03-31OpenAI Model Bypassed to Generate Fraudulent Receipts and Prescriptions1 Researchjailbreak · fraud · forgery
- 2025-03-14ChatGPT Package Hallucination Supply Chain Risk1 Researchhallucination · supply-chain · package-squatting
- 2023-10-30ChatGPT Conversation Exfiltration via Indirect Prompt Injection1 Researchindirect_prompt_injection · data_exfiltration · chatgpt
- 2023-03-26LLM Application Frameworks Allow Remote Code Execution via Prompting1 Researchprompt-injection · remote-code-execution · langchain
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.