Critical account takeover vulnerability in ChatGPT