Security researchers at Hacktron AI discovered a memory-corruption bug in an image library used by OpenAI's forum, then used Anthropic's Claude Opus 5 to develop a working exploit that achieved remote code execution and access to OpenAI's private repositories within 72 hours. The vulnerability stemmed from an unpatched libheif flaw in Discourse combined with excessive permissions in OpenAI's single sign-on system.
Cyber researchers from Hacktron AI used Anthropic's security tool to breach an OpenAI employee's ChatGPT account, gaining access to private software information as part of a paid bug bounty program. The incident highlights vulnerabilities in OpenAI's security and adds to concerns about AI systems' susceptibility to hacking as leading AI companies face increased scrutiny over safety.
Security researchers chained two critical vulnerabilities to compromise OpenAI employee accounts on July 25, 2026, gaining access to internal repositories within 72 hours. The vulnerabilities involved an SSO misconfiguration and a libheif RCE in OpenAI's community forum. OpenAI and Discourse were notified and patched the issues; OpenAI awarded a $6,500 bounty.