Security researchers at Hacktron AI discovered a memory-corruption bug in an image library used by OpenAI's forum, then used Anthropic's Claude Opus 5 to develop a working exploit that achieved remote code execution and access to OpenAI's private repositories within 72 hours. The vulnerability stemmed from an unpatched libheif flaw in Discourse combined with excessive permissions in OpenAI's single sign-on system.
Security researchers at Hacktron AI used Anthropic's Claude Opus 5 to exploit vulnerabilities in OpenAI's systems, gaining access to employee ChatGPT accounts through a flaw in Discourse's image upload handling. OpenAI awarded the team a $6,500 bug bounty after the vulnerabilities were reported and subsequently patched.
Security researchers at Hacktron AI used Anthropic's Claude to identify vulnerabilities in OpenAI's systems, chaining together flaws in Discourse and libheif to access employee ChatGPT accounts. OpenAI awarded the team $6,500 through its bug-bounty program and resolved the issues, highlighting how accessible AI tools can expose security gaps even in advanced companies.
Cyber researchers from Hacktron AI used Anthropic's security tool to breach an OpenAI employee's ChatGPT account, gaining access to private software information as part of a paid bug bounty program. The incident highlights vulnerabilities in OpenAI's security and adds to concerns about AI systems' susceptibility to hacking as leading AI companies face increased scrutiny over safety.
Security researchers chained two critical vulnerabilities to compromise OpenAI employee accounts on July 25, 2026, gaining access to internal repositories within 72 hours. The vulnerabilities involved an SSO misconfiguration and a libheif RCE in OpenAI's community forum. OpenAI and Discourse were notified and patched the issues; OpenAI awarded a $6,500 bounty.