OpenAI's ChatGPT for Google Sheets extension, downloaded 185,000 times in a month, lets attackers exfiltrate multiple workbooks and inject phishing overlays via hidden prompt injection in imported data—bypasses manual approval settings; OpenAI unresponsive to disclosure.

ChatGPT for Google Sheets Exfiltrates Workbooks

This attack does not require human-in-the-loop approvals, even when in settings the user has explicitly required human approval before ChatGPT edits workbooks.OverviewRecently, OpenAI launched an AI extension for using ChatGPT in Google Sheets, which has accumulated over 185,000 downloads since its launch less than a month ago. This allows users to operate on their spreadsheets by interacting with an AI chatbot that lives in a sidebar, with the added benefit of drawing on data from ChatGPT conne...