Disclosed vulnerability
ChatGPT: lack of isolation between Code Interpreter sessions of different GPTs
AIR-2024-0010 AIR record · 2024-02-openai-gpts-code-interpreter-isolation
From the supporting source
It allows the creator of a malicious GPT to steal and also overwrite files from your conversations with other GPTs, including ChatGPT.embracethered.com
The record
Disclosed
2024-02-14
Vendor
OpenAI
Product
ChatGPT Code Interpreter / custom GPTs
Risk domain
Access control and permissions › Privilege escalation
Also touches
Supply chain vulnerabilities
System type
Generative model
Who acted
Agent acted (contested) — the Code Interpreter executed attacker code that read and overwrote other sessions' files
Attack surface
Skill / plugin
Autonomy level
Assistant
Initial vector
Malicious custom gpt
Impact type
Unauthorized data access, Data tampering
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI03 – Identity and Privilege Abuse
- MITRE ATLAS
- AML.T0055 – Unsecured Credentials
- NIST AI RMF
- GOVERN 6.1
- EU AI Act
- Article 13
- ISO/IEC
- TR 24028; 42001; 23894
- AIUC-1
- B. Security
- Scope
- tool misuse
- Mitigation
- Apply least-privilege principle; Regular policy audits.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
users who used multiple GPTs with Code Interpreter in the same session
Capability abused
Defense & remediation
Recorded defense
assumed per-GPT sandbox isolation, which did not exist
Guardrail kinds
Sandbox isolation
Guardrail outcome
Silent
Fix shipped
fixed May 2024; reported November 2023 with no follow-up before the 90-day public disclosure
Taxonomy & references
Curator notes
Johann Rehberger. An isolation failure rather than a prompt-injection bug.
Supporting sources
Cite as
Enkrypt AI. "ChatGPT: lack of isolation between Code Interpreter sessions of different GPTs". AIR, AIR-2024-0010. https://agentincident.vercel.app/i/AIR-2024-0010/ (accessed 2026-10-19).