By bypassing ChatGPT's sandbox and content security policy, our research team was able to take over anyone's account simply by sending them a link.