pith. sign in

arxiv: 2406.00199 · v2 · pith:RCDPBRC3new · submitted 2024-05-31 · 💻 cs.CR · cs.AI· cs.CL· cs.CY· cs.ET

Exfiltration of personal information from ChatGPT via prompt injection

Gregory Schwartzman This is my paper
classification 💻 cs.CR cs.AIcs.CLcs.CYcs.ET
keywords chatgptpersonalallowsattackerdatainjectionpromptusers
0
0 comments X
read the original abstract

We report that ChatGPT 4 and 4o are susceptible to a prompt injection attack that allows an attacker to exfiltrate users' personal data. It is applicable without the use of any 3rd party tools and all users are currently affected. This vulnerability is exacerbated by the recent introduction of ChatGPT's memory feature, which allows an attacker to command ChatGPT to monitor the user for the desired personal data.

This paper has not been read by Pith yet.

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score.

  1. An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments

    cs.CR 2026-05 unverdicted novelty 6.0

    Empirical demonstration that prompt injection combined with web-tool use creates a feasible privacy-leakage chain in deployed black-box chatbot agents.