AnalysisCybersecurityNovember 6, 2026

ChatGPT silently routes tool calls between connectors, OpenAI forum post reports

Read original source →community.openai.com

With two connectors pointing at the same MCP server, a follow-up call carrying connector A's one-time confirmation code was sent through connector B without notifying the user. The server rejected it because the code was bound to A's OAuth client; the poster warns a third-party connector could leak data across providers.

1 source

More stories today

Open the live feed