Page 1 of 2

Report a prompt injection

Reports stay private until they're listed on gptbugs.com. Don't include real user data: use your own accounts and test content.

Product name

*

Affected feature or URL

*

Injection type

*

A

Direct: typed into the app by the user

B

Indirect: arrives in content the app reads

C

Not sure

Where does the payload enter?

*

Chat input

Web page

Email

Document or file

RAG or search results

Tool or API result

Image

Code or repository

Other

What does it achieve?

*

Reproduction steps

*

Not sure how to rate it? See how reports are rated.

Screenshots

Upload any screenshots you have demonstrating the prompt injection. Crop or blur anything that isn't yours.

Your severity estimate

*

A

Critical

B

High

C

Medium

D

Low

E

Not sure

Is it patched?

*

A

Yes

B

No

C

Don't know

Date you last confirmed it works

*

Have you told the vendor?

A

Yes

B

No

Credit as

Email for follow-up (never published)

Confirmation

*

This report contains no real user data.