// ChatgptHIGH
Hacktron researchers used Claude Opus 5 to exploit a libheif heap-buffer overflow (CVE-2026-32882) in OpenAI's Discourse-based community forum on July 25, 2026. The RCE was chained with an OpenAI sign-in flaw to compromise employee ChatGPT and Codex accounts, gaining access to internal code repositories. OpenAI patched the authentication issue in 14 hours; the researchers demonstrated proof of access and received a $6,500 bug bounty.
- AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI(opens in a new tab)
- Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Int(opens in a new tab)
- OpenAI fixes flaw after Claude-assisted internal breach(opens in a new tab)
- Researchers used Anthropic's Claude to hack into OpenAI | TechCr(opens in a new tab)
- AI cybersecurity risks explode as Claude used to break into Chat(opens in a new tab)
- OpenAI account takeover flaw exploited with Claude AI | Cybernew(opens in a new tab)
// Get alerts for Chatgpt