Check Point Research reported a way to bypass ChatGPT's Lockdown Mode, an optional setting meant to block prompt injection from leaking data, using the HTML preview's popup windows; in the ChatGPT Classic desktop app no click was needed. OpenAI fixed the flaw on September 18, and Check Point retested and confirmed the technique no longer works.