Prompt Injection Flaw Turns ChatGPT Google Sheets Extension into Data Theft Tool

ChatGPT for Google Sheets, which accumulated over 185,000 downloads in less than a month, contains a critical vulnerability allowing attackers to exfiltrate an entire account's workbooks through a single indirect prompt injection attack. The flaw bypasses user-enabled approval safeguards and can be triggered via seemingly innocent data imports. OpenAI's failure to adequately address this responsibly disclosed vulnerability has forced security researchers to publish details publicly, exposing millions of users to potential account-wide data theft.