{"schema_version":"0.10.0","id":"LR-2026-0797","record_version":1,"title":"ChatGPT macOS app vulnerability exposed conversations, since fixed","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":52.2,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":3.52,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: ForkLog · subject to change","original_document":null,"reports_total":2,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: ForkLog · subject to change"}]},"sources_hash":"81078c5cdc4ac809e767874f54650052270c7007eb8ee6ddead84918329d1009"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"native desktop access to its popular AI assistant","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-02","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"third_party","summary":"The system was the ChatGPT app for macOS, an AI assistant that holds conversations and can reach connected resources. Researchers found that unprivileged code running on a Mac could masquerade its commands as requests from trusted OpenAI components. The app's signature check extended to parent and grandparent processes, and a script interpreter in the trusted chain could run untrusted code. A malicious script could activate that interpreter three times, after which the app treated the request as trusted. The flaw was identified by researchers from the Objective-See Foundation. Reach was limited to local ChatGPT data and resources the app already had authorized access. The issue was fixed in app version 26.924.20706 and assigned CVE-2026-100754.","tags":["cve-2026-100754"],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"Fix included in app version 26.924.20706","precursor_events":null,"primary_risk":"RK08"},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Moderate test met: user data of others touched (conversation logs), with a bounded scope stated (limited to local ChatGPT data and resources the app already had authorized access)","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://forklog.com/en/vulnerability-in-chatgpt-macos-app-allowing-access-to-conversations-fixed/","publisher":"ForkLog","date":"2026-10-02","type":"press","title":"Vulnerability in ChatGPT macOS App Allowing Access to Conversations Fixed - ForkLog","archived_url":null,"attachment":"first_report","independence":"independent"},{"url":"https://www.techbuzz.ai/articles/chatgpt-mac-app-vulnerability-exposed-user-data-to-hackers","publisher":"The Tech Buzz","date":"2026-10-02","type":"press","title":"ChatGPT Mac App Vulnerability Exposed User Data to Hackers - The Tech Buzz","archived_url":null}],"per_field_confidence":{"system.intended_use":"C","event.incident_class":"C","event.detection_method":"C","event.tags":"C","event.remediation":"C","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.intended_use":[{"source_index":1,"quote":"The Mac app, which OpenAI launched to provide native desktop access to its popular AI assistant, processes countless conversations that often contain personal and professional information."}],"event.incident_class":[{"source_index":1,"quote":"The security flaw, disclosed by researchers and now fixed, underscores the growing security challenges as AI tools become more integrated into daily workflows."}],"event.detection_method":[{"source_index":0,"quote":"The vulnerability was identified by researchers from the Objective-See Foundation."}],"event.tags":[{"source_index":0,"quote":"It has been assigned the identifier CVE-2026-100754, and the patch was included in app version 26.924.20706."}],"event.remediation":[{"source_index":0,"quote":"It has been assigned the identifier CVE-2026-100754, and the patch was included in app version 26.924.20706."}],"impact.severity":[{"source_index":0,"quote":"The attack capabilities were limited to local ChatGPT data and resources to which the app already had authorized access."}],"impact.severity_because":[{"source_index":0,"quote":"The attack capabilities were limited to local ChatGPT data and resources to which the app already had authorized access."}],"event.summary":[{"source_index":0,"quote":"A vulnerability was discovered in the ChatGPT app for macOS, allowing unprivileged code running on a computer to masquerade its commands as requests from trusted OpenAI components, potentially accessing conversations, data, and app integrations."},{"source_index":0,"quote":"This verification extended not only to the process directly sending the request but also to its parent and grandparent processes."},{"source_index":0,"quote":"Researchers found a script interpreter in the trusted chain capable of executing untrusted code."},{"source_index":0,"quote":"According to them, a malicious script could sequentially activate the interpreter three times, after which the main app process would perceive the request as coming from a trusted OpenAI component."},{"source_index":0,"quote":"The vulnerability was identified by researchers from the Objective-See Foundation."},{"source_index":0,"quote":"The attack capabilities were limited to local ChatGPT data and resources to which the app already had authorized access."},{"source_index":0,"quote":"It has been assigned the identifier CVE-2026-100754, and the patch was included in app version 26.924.20706."}]},"notes_on_gaps":"No date of occurrence, date of detection or date of disclosure is stated; the article dates are publication dates and were not used. No exploitation in the wild, loss amount, record count or count of affected parties is stated. No autonomous agent involvement is stated, so agent and failure-class fields are omitted. The trigger, adversarial actor and responsible party are not stated, so they are omitted. The sources name no control that held, failed or was bypassed, so no control entries are given beyond the patch mapped to J1 as a judgement. Severity moderate is my judgement from the bounded-scope sentence. The Hacktron AI intrusion and the 2024 unencrypted-conversations fix concern other incidents and are excluded. Source 1 adds no new facts beyond source 0. Model name, version, harness and deployment context are not stated. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: ForkLog · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"The ChatGPT Mac app gives desktop access to an AI assistant and processes many conversations containing personal and professional information.","quote":"The Mac app, which OpenAI launched to provide native desktop access to its popular AI assistant, processes countless conversations that often contain personal and professional information.","source_index":1,"grade":"C"},{"step":"went_wrong","text":"Unprivileged code on a Mac could masquerade its commands as requests from trusted OpenAI components, potentially reaching conversations, data and app integrations.","quote":"A vulnerability was discovered in the ChatGPT app for macOS, allowing unprivileged code running on a computer to masquerade its commands as requests from trusted OpenAI components, potentially accessing conversations, data, and app integrations.","source_index":0,"grade":"C"},{"step":"caught","text":"Researchers from the Objective-See Foundation identified the vulnerability.","quote":"The vulnerability was identified by researchers from the Objective-See Foundation.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://forklog.com/en/vulnerability-in-chatgpt-macos-app-allowing-access-to-conversations-fixed/","https://www.techbuzz.ai/articles/chatgpt-mac-app-vulnerability-exposed-user-data-to-hackers"]},"analysis":{"sections":{"timeline":[{"text":"Researchers privately reported the flaw to OpenAI before going public.","quote":"The responsible disclosure process appears to have worked as intended, with researchers privately reporting the flaw to OpenAI before going public.","source_index":1,"when":null},{"text":"The patch was included in app version 26.924.20706.","quote":"It has been assigned the identifier CVE-2026-100754, and the patch was included in app version 26.924.20706.","source_index":0,"when":null},{"text":"Developers fixed the issue and disclosed the details, according to WIRED.","quote":"Developers have fixed the issue and disclosed the details, according to WIRED.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://forklog.com/en/vulnerability-in-chatgpt-macos-app-allowing-access-to-conversations-fixed/","https://www.techbuzz.ai/articles/chatgpt-mac-app-vulnerability-exposed-user-data-to-hackers"]}}