Preliminary research

The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT

Alexey Bukhteyev · Check Point Research · 8 September 2026

AI-collected research leads through 12 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

The article turns mutable Artifactory item properties shared by isolated ChatGPT code-execution containers into a bidirectional cross-account channel. A prompt, shared conversation or custom GPT can use it as a hidden task stream, letting the victim session read connected-app data and return results without showing the task in the visible response.

Record

Researcher

Alexey Bukhteyev

Published by

Check Point Research

Date

8 September 2026

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• ai-agent
• prompt-injection
• cross-tenant
• data-exfiltration
• side-channel
• credential-theft
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Alexey Bukhteyev, first published at the original source. Preserved copies are kept so the citation survives its host.