Malicious prompts could exploit ChatGPT to steal data from your private emails, claims researcher

A recent demonstration by an X user, Eito Miyamura, a developer and Oxford alumnus, has highlighted a potential security vulnerability in OpenAI’s ChatGPT.

Oxford developer demonstrates ChatGPT security flaw

In a social media post on Friday, Miyamura claims he was able to exploit the newly introduced Model Context Protocol (MCP) tools to access and leak private user data, including emails and calendar events, using nothing more than the victim’s email address.

OpenAI recently announced full support for MCP tools in ChatGPT, which allow the AI to…