Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.3
CVE-2024-40594: The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps.
CVE-2024-40594 · published 2 years ago
Summary
The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps.
Original advisory text
The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps.
The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-312Cleartext Storage of Sensitive Information
Timeline
Published6 Jul 2024
Updated26 Oct 2026
First seen29 Sep 2026
Sources
CVE-2024-40594 · NVD
Track software like this
Free during beta