A ChatGPT shared link could take over your account: how to review and delete yours

Updated November 1, 2026 · 4-minute read

Until OpenAI fixed it on October 26, 2026, a booby-trapped ChatGPT share link could run code inside the signed-in account of whoever opened it and read their private chats. The hole is closed, but it's a good moment to check which shared links you still have and delete the ones you don't need, since they never expire on their own.

Disclosure: ConvoShelf is our product. The details of the bug come from Parameter Labs' write-up, and the steps for managing links come from OpenAI's help article on sharing conversations. We read both on November 1, 2026.

What the researchers found

Parameter Labs says it found a way to turn an ordinary public ChatGPT share into JavaScript running as chatgpt.com in the session of the person viewing it. The share combined two normal features: an interactive graph, which loaded a math keyboard library called MathLive into the main ChatGPT page, and an HTML Preview, which runs in a separate sandboxed frame. MathLive accepted messages from the Preview without checking who sent them, and one of those messages could insert HTML into the main page. From there the researchers got script running by loading it from a YouTube address that ChatGPT's security policy allowed.

In their proof, the code listed the viewer's recent conversations, read one private conversation that had never been shared, and sent a small piece of it to the researchers' server. The viewer didn't need to install anything or paste anything. In the most reliable version they clicked ChatGPT's normal Preview button once; in another, opening the link was the only click. Parameter Labs says the same access could have done anything the ChatGPT web app can do for that account.

When it was fixed

October 18, 2026: reported to OpenAI's bug bounty program.
October 21: OpenAI reproduced it and raised the severity from P2 to P1.
October 22 and 23: one of ChatGPT's two web frontends was fixed, and security policy changes blocked part of the chain on the other.
October 26: OpenAI confirmed both frontends rejected the messages, marked it resolved and paid a $5,000 bounty.

The write-up doesn't say whether anyone used the bug before it was fixed, and we haven't seen OpenAI say so either. There's nothing you need to install or update, because the fix was on OpenAI's side.

How to review and delete your shared links

This bug hit people opening links, not people who shared them. Still, OpenAI says a personal-account share link works for anyone who has it, can't be limited to specific people, and has no expiration date. So links you made months ago are still open.

Open the list. Go to Settings, select Data controls, and next to Shared links select Manage. It shows shared conversations and shared scheduled tasks.
Delete one link. Select Delete shared link next to it.
Delete them all. Open More actions and select Delete all shared links.

Deleting a link doesn't delete the conversation in your account, and it doesn't remove copies that people who opened it already saved. If you delete the conversation itself, OpenAI says its share link goes with it. Locking a chat doesn't delete an existing link either, so delete it separately.

Opening links other people send you

OpenAI says shared conversation links start with https://chatgpt.com/share/ and shared task links with https://chatgpt.com/s/. Check that the link is on chatgpt.com and comes from someone you trust. For a share that looks wrong, use Report conversation if it appears, or OpenAI's content reporting form.

Where ConvoShelf fits

ConvoShelf doesn't scan or block links, so it wouldn't have stopped this bug. We checked the code of version 1.0.2, the version on the Chrome Web Store, on November 1, 2026.

It saves the text of chats you open at chatgpt.com/c/ addresses into your browser's local storage. It doesn't save shared pages at /share/ addresses, because it only recognizes /c/ chat addresses.
Its only network request is to Polar, the payment service, to check a Pro license key when you enter one. Chats aren't sent anywhere.
If you want a copy of a chat before you delete the conversation to kill its link, open it first so ConvoShelf saves it. On the free plan, the Export tab saves the open chat as Markdown or PDF. Pro, $4.99 once, adds JSON and exports of a folder or every saved chat.

Before deleting, it's also worth reading why deleting a ChatGPT chat doesn't delete its memories and how to delete multiple ChatGPT chats at once.

Add ConvoShelf to Chrome Free · no account

FAQ

Is the ChatGPT shared link bug still open?

No. Parameter Labs reported it to OpenAI's bug bounty program on October 18, 2026, and says OpenAI confirmed the fix on October 26, 2026 and rated it P1. The researchers published their write-up on October 28, after the fix.

Could opening a ChatGPT share link read my other chats?

Before the fix, yes. Parameter Labs showed that a crafted public share could run JavaScript as chatgpt.com in the viewer's signed-in session, list their recent conversations and read a private one. They say it could do anything the ChatGPT web app can do for that account.

How do I see all my ChatGPT shared links?

In ChatGPT, go to Settings, select Data controls, and next to Shared links select Manage. OpenAI says the list includes shared conversation links and shared scheduled task links.

Does deleting a shared link delete the chat?

No. OpenAI says deleting a shared link stops future access to that link but does not delete the original conversation. It also does not remove copies other people already saved to their own accounts.

Do ChatGPT shared links expire?

No. OpenAI says shared links have no expiration date and can't be limited to specific people, so a link from a personal account works for anyone who has it until you delete it.