--- format: "aidr-story-markdown/v1" id: "5b5f4925f1b37cdff3018dcede7b5cc3d92953d04e1968e6740a11ad2fcffb68" canonical_url: "https://aidr.today/5b5f4925?lang=en" title: "ChatGPT silently passes data between connectors and the bounty wants an ID card" lang: "en" requested_lang: "en" available_langs: ["en","vi"] translation_fallback: null fallback_fields: [] published_at: "2026-11-06T22:50:43.000Z" category: "Tools" topics: ["openai","agent","devtools"] source_urls: ["https://community.openai.com/t/security-follow-up-tool-call-silently-routed-to-a-different-connector/1413053","https://news.ycombinator.com/item?id=50399569"] summary: "ChatGPT made a follow-up tool call through a different connector than the one that started the flow when two connectors were enabled. The call carried a one-time confirmation code from the first connector’s widget. The server rejected the call because the code was bound to connector A’s OAuth client even though it was redeemed through connector B." --- # ChatGPT silently passes data between connectors and the bounty wants an ID card > [Open the canonical story]() **Published:** 2026-11-06T22:50:43.000Z **Category:** Tools **Topics:** openai, agent, devtools ## Summary ChatGPT made a follow\-up tool call through a different connector than the one that started the flow when two connectors were enabled\. The call carried a one\-time confirmation code from the first connector’s widget\. The server rejected the call because the code was bound to connector A’s OAuth client even though it was redeemed through connector B\. ## Sources - [Story source]() - [Discussion]()