// OpenaiHIGH
Security researcher Oliver Fish discovered a sandbox escape vulnerability in OpenAI's infrastructure that allowed unauthenticated access to paid AI models without an API key or account. The vulnerability bypassed both sandbox isolation and API authentication, enabling requests through an internal route without identity or billing verification. OpenAI awarded $300 through its Bugcrowd program; technical details remain undisclosed and no evidence suggests exploitation beyond the researcher's testing.
// Get alerts for Openai