Will ChatGPT Artifacts HTML sandbox escape lead to 50+ account compromises by Jan 31, 2027?

Security researchers at Parameter Labs discovered an exploit chain in OpenAI's ChatGPT Artifacts (formerly Canvas) implementation that allows interactive custom HTML to escape the sandbox and compromise user accounts. The flaw leverages OpenAI's HTML preview feature to execute unauthorized actions on behalf of users (Simon Willison).

Resolution Criteria

One of: (1) OpenAI confirms 50+ compromised accounts traced to this vulnerability; (2) a third-party security firm or journalist documents 50+ account takeovers via this method; (3) public disclosure of widespread active exploitation of this specific attack pattern by threat actors.