0
Applied AI·November 6, 2026·1 min read

'AI security controls are only as strong as the wider application environment around them': OpenAI forced to patch after experts bypass ChatGPT 'lockdown mode' to gain access to entire chat history

Share

A simple HTML popup bypass exposing full chat histories shows that AI ‘lockdown modes’ are only as strong as the surrounding app surface. If you’re integrating assistants into sensitive workflows, threat-model the entire UI and session stack, not just the model and its policies.