OpenAI’s Lockdown Mode Was Bypassable: Researchers Say Chat Histories Could Be Exfiltrated

The flaw has since been closed. Check Point said an attack could be launched through a malicious prompt, a malicious GPT or a shared chat.

The weakness lay in the HTML preview feature OpenAI added to ChatGPT code blocks in February 2026, which renders model-generated web code inside a sandbox.