[Security](https://leakly.com/security/)

[Confirmed]

# Check Point found a now-patched way around ChatGPT Lockdown Mode

The flaw allowed silent chat data theft, phishing and malware delivery, the researchers say.

Leaked on 08 November 2026

![A smartphone running the ChatGPT app](https://leakly.com/assets/images/chatgpt-lockdown-mode-bypass-check-point-hero.jpg)

A smartphone running the ChatGPT app. [Photo: Jernej Furman from Slovenia / Wikimedia Commons, cropped](https://commons.wikimedia.org/wiki/File:Smartphone_with_ChatGPT_app_(52917381673).jpg) ([CC BY 2.0](https://creativecommons.org/licenses/by/2.0/))

[Check Point Research](https://research.checkpoint.com/2026/chatgpt-lockdown-mode-bypass-phishing-malware-delivery-and-silent-data-exfiltration/) disclosed a now-patched vulnerability that could bypass Lockdown Mode protections in ChatGPT, [The Hacker News](https://thehackernews.com/2026/11/researchers-bypass-chatgpt-lockdown.html) reported. @The\_Cyber\_News shared the findings on X.

> **Cyber Security News** @The\_Cyber\_News
>
> ‼️ Hackers Could Bypass ChatGPT Lockdown Mode to Steal Conversations Without Users Knowing
> Details: https://t.co/CSjocVgzKD
> A flaw in ChatGPT let attackers slip past Lockdown Mode, the safety setting meant to stop data leaks. Check Point Research found that a hidden pop-up trick could copy a user’s full chat history, show fake windows, and push malware.
> In the ChatGPT Classic desktop app, simply chatting was enough to trigger the leak. OpenAI launched Lockdown Mode on February 13, 2026, first for business plans. On June 4, it reached personal accounts, where users can turn it on under Settings > Security.
> #cybersecuritynews
>
> 269 likes · 75 reposts · counts as of 09 Nov 2026, 12:49 UTC
>
> — Cyber Security News (@The\_Cyber\_News) [November 8, 2026](https://twitter.com/The_Cyber_News/status/2119247150672695322)

not in our leaker index

"The flaw could enable silent chat data theft, phishing, and malware delivery, including zero-click data exfiltration in the ChatGPT desktop application," Eli Smadja, head of research at Check Point, said, according to The Hacker News. The problem stemmed from HTML previews inside ChatGPT code blocks.

Check Point published the research, and the vulnerability has been patched.

## What we know

* The bypass abused HTML previews in code blocks.
* It has been patched.

## What we don't know

* Whether it was exploited in the wild.

## What would confirm it

Already confirmed.

## Sources

* [Original X post by @The\_Cyber\_News](https://x.com/The_Cyber_News/status/2119247150672695322)
* [ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data Exfiltration - Check Point Research](https://research.checkpoint.com/2026/chatgpt-lockdown-mode-bypass-phishing-malware-delivery-and-silent-data-exfiltration/)
* [Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction](https://thehackernews.com/2026/11/researchers-bypass-chatgpt-lockdown.html)

[Confirmed]

## What happened later

Check Point published the research, and the vulnerability has been patched.

Status key: [how we label leaks](https://leakly.com/editorial-guidelines/#status) · [Corrections](https://leakly.com/corrections/) · [Contact](https://leakly.com/contact/)