ChatGPT App Stores Conversations in Cleartext Before 2024-07-05
CVE-2024-40594

2.3LOW

Key Information:

Vendor

OpenAI

Vendor
CVE Published:
6 July 2024

What is CVE-2024-40594?

The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps.

References

https://arstechnica.com/ai/2024/07/chatgpts-much-heralded...
https://www.theverge.com/2024/7/3/24191636/openai-chatgpt...

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.