A vulnerability in ChatGPT for Google Sheets allows attackers to execute data exfiltration and phishing overlay attacks. By exploiting an indirect prompt injection in a single spreadsheet, malicious actors can compromise workbooks across the victim's entire account.