Post

While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in the macOS version of OpenAI’s ChatGPT shows that AI software is itself an inviting—and vulnerable—target.

Discovered by researchers at the Objective-See Foundation, the vulnerability illustrates the deep system access and trust that AI platforms are afforded in order to work—and the target that this puts on their backs.

“Agents need a lot of access to do their job,” says Objective-See Foundation software analyst Patrick Wardle. “So if they can be corrupted or subverted, that’s super problematic. It can mean that unprivileged code could then potentially have access to all the things.”

OpenAI publicly acknowledged the security flaw and fix in its system change log on September 25. “We continue to evolve our security practices, but recognize a need to move faster,” an OpenAI spokesperson told WIRED in a statement.