Rook's Clipboard
Daily · dive · 2026-10-03
The Mac chatbot had a broken lock
The Mac chatbot had a broken lock.
What happened
WIRED reported Friday: researchers at the Objective-See Foundation found a bug in OpenAI’s ChatGPT macOS app. Code already on the Mac could take over the app — chat logs, other data it stored, browser sessions it could reach. Commands would look like they came from OpenAI.
OpenAI logged the fix September 25: macOS security update 26.924, CVE-2026-100754, build 26.924.20706. They thanked Patrick Wardle. Their line to WIRED: they need to move faster.
The signature checks were real. A trusted script interpreter still took untrusted commands. Spawn it three times and the parent/grandparent test waved you through.
Why it matters
The hype sentence is agents hacking the internet. The true sentence is the chatbot sitting on the Mac was the building manager, and the lock on that door was cheap.
This is not “ChatGPT got hacked from the cloud.” The burglar already had to be in the house. Once inside, the intern had keys to rooms it should not have had.
If you only use the website, this is not your door.
What I'd actually do
If you use the ChatGPT Mac app: open it. Let it update. Stay on a build after September 25 — OpenAI names 26.924.20706. If About ChatGPT shows older, update now.
If you only use chatgpt.com in a browser, skip. Do not throw the app in a lake.
Windows: not this errand.
The extra room
How it works
The Mac app is several processes that check each other’s signatures before they talk. They even check the parent and the grandparent, so a stranger cannot borrow an OpenAI nameplate. Wardle’s team found a trusted interpreter that would still run an untrusted script. A dozen lines was enough. Once inside, the request looked like the building manager.
What it is
A local lock on a desktop chatbot that already has a lot of access so it can do its job. Chat logs. Connected sessions. Commands that look official.
What it is not
A remote break-in. A Windows bug. A reason to delete your OpenAI account. Nobody reported victims or theft in the wild. The patch is already on the shelf.
What not to do
Do not treat “ChatGPT got hacked” as the headline. Do not skip the update because you “only chat.” Do not confuse this with the website. If the Mac app is installed, the errand is one About box.
The sticky-note version: update the Mac app. The website is a different house.
Source