// OpenaiHIGH
Researchers from Hacktron exploited CVE-2026-32882, a heap-buffer overflow in libheif, to achieve remote code execution on OpenAI's community forum via HEIC image upload. The compromise cascaded through a misconfigured single sign-on to takeover active employee ChatGPT and Codex accounts, enabling access to OpenAI's private GitHub monorepo. The vulnerability chain was disclosed July 25, 2026, and remediated within 14 hours. Discourse also received a separate report and issued patch GHSA-vhm9-85gw-x335.
- Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Int(opens in a new tab)
- AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI(opens in a new tab)
- Hacktron AI uses Claude Opus 5 to exploit OpenAI's security vuln(opens in a new tab)
- OpenAI fixes flaw after Claude-assisted internal breach(opens in a new tab)
- Researchers used Anthropic's Claude to hack into OpenAI | TechCr(opens in a new tab)
- Claude Opus 5 Helped Researchers Breach OpenAI in 72 Hours(opens in a new tab)
// Get alerts for Openai