ChatGPT Silently Routes Tool Calls Across OAuth Connectors
A researcher discovered that ChatGPT silently switches between OAuth connectors mid-workflow, passing confirmation codes from one connector's context to a different connector without user notification. While server-side binding caught the specific case tested, the underlying architectural flaw means data produced in one app's authorisation context can be silently transmitted to a different connected application. This represents a consent and authorisation continuity gap in multi-connector MCP-based agent workflows.