ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

Cybersecurity researchers have disclosed details of a vulnerability in OpenAI ChatGPT that leverages the artificial intelligence (AI) assistant's implicit trust in Markdown links and images to trigger prompt injections and open the door to phishing attacks. The technique has been codenamed ChatGPhish by Permiso Security. "The chatgpt.com response renderer trusts Markdown links and Markdown

Researchers at Permiso Security disclosed a vulnerability in ChatGPT, dubbed "ChatGPhish," where the chatgpt.com renderer implicitly trusts Markdown links and images in web summaries, enabling attackers to inject malicious prompts and turn those summaries into a phishing vector.[1] According to the report, this allows hostile content embedded in third‑party pages to influence ChatGPT’s behavior or present deceptive UI elements to users when web content is summarized.[1] From a security perspective, this illustrates a classic indirect prompt injection and UI phishing risk whenever LLMs automatically render or act on untrusted external content. CyberSE.AI analysis: organizations integrating web-browsing LLM agents should enforce strict content sanitization, limit Markdown/HTML rendering, and continuously red-team agent behaviors against prompt injection and phishing-style manipulations.