OpenAI 在其新的 ChatGPT 扩展中推出了一个受限的浏览器控制运行时
对 Chrome 扩展版本 1.26.1005.11759 的检查发现了本地 JavaScript 环境和一个直接的服务器连接，这些最终可能会取消对桌面应用的要求。代码还包含一个用于电子邮件验证码的基于批准的移交；这两种工作流都未在无桌面会话中得到验证。
By Ryan Merket · Published · Updated
RUNTIMEWIRE INVESTIGATION — Original analysis
Original reporting by RuntimeWire, based on reverse engineering, documents.
为何重要
OpenAI 正在将 ChatGPT 更紧密地整合到那些工作已经在其中进行的浏览器会话中。这带来了分发优势，同时也使站点权限、私人账户访问和安全执行成为核心的产品问题。
Reporting record
Finding
Inspection of the installed ChatGPT Chrome extension found gated browser-control infrastructure that can register sessions with OpenAI’s server and poll for browser commands, but did not establish a working desktop-free session.
How we verified
Methods: reverse engineering, documents.
The inspected extension was version 1.26.1005.11759 and included the 'chrome-standalone-js-kernel' feature flag, a sandboxed JavaScript runtime, an MCP server named 'node-repl-work', and session registration and tunnel polling endpoints. OpenAI’s setup instructions still direct users to connect through the desktop app.
Inspected the installed extension’s bundled code, including its browser-control and OTP-handling paths, and compared the implementation with OpenAI’s published setup instructions and release notes. No desktop-free session was verified.
Reproduction
RuntimeWire was not able to independently reproduce the finding.
Company response
The company was not contacted before publication.
对已安装的 OpenAI ChatGPT Chrome 扩展，版本 1.26.1005.11759 的检查发现，在功能标志 'chrome-standalone-js-kernel' 后面存在一个浏览器控制运行时。代码指向一种设置，即 OpenAI 的服务器向运行在扩展内部的 JavaScript 环境发送浏览器任务，使用用户已登录的浏览器会话。该实现存在于扩展中；尚未验证在没有桌面应用的情况下可运行的会话。
该运行时包含一个沙箱化的 JavaScript 环境和一个自称为 'node-repl-work' 的 MCP 服务器，带有一个 'js' 工具。它通过 'chatgpt.com/backend-api/browser-use/sessions' 注册会话，然后轮询 '/v1/tunnels/{id}/poll' 获取命令，并通过 '/response' 发送结果。这些部分共同描述了一条直接的服务器到扩展的命令路径，而不是仅通过桌面应用启动的浏览器工作。
OpenAI 的 当前设置说明 仍然指示用户通过 ChatGPT 桌面应用安装并连接扩展。它们并未记录独立扩展会话。因此，代码检查确定的是已随附、受限的基础设施，而不是一个可在没有桌面应用的情况下工作的产品。…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.