BREAKING
ChatGPT Flaw Reads /etc/passwd
How the Two-Stage Chain Worked
1
Request file edit
↓
2
Bypass guardrail
↓
3
Add /../ traversal
↓
4
Grab /etc/passwd
Language Guardrail vs Byte Shell
Impact and Fix Status
Risk
LLM02:2025
●
PoC read /etc/passwd
●
OWASP LLM Top 10
●
No CVE issued
Response
Fixed
●
Download flow redesigned
●
Sandboxed interpreter
●
No user harm reported
Small Flaws Chained Still Matter
Scope and Validate Tool Calls
AI NEWS BLITZ
A researcher chained two bugs in ChatGPT's file download feature to reach a system file.