
- Check Point Research found ChatGPT flaw enabling silent data exfiltration via DNS abuse and prompt injection
- Vulnerability allowed attackers to bypass guardrails and steal sensitive user data through covert domain queries
- OpenAI patched issue on Feb 20, 2026, marking second major fix that week after Codex command injection flaw