GoKawiilWhite-hat hackers breach OpenAI's internal codebase via Discourse forum flaw
Cybersecurity firm Hacktron AI disclosed that its researchers exploited a chained vulnerability—an outdated image-processing library on OpenAI's Discourse forum combined with an SSO misconfiguration—to hijack employee ChatGPT and Codex accounts and reach OpenAI's private code repository. To prove the breach, they submitted a harmless pull request to OpenAI's internal monorepo before reporting the flaws through OpenAI's bug bounty program. OpenAI patched the issue within 14 hours and paid the team a $6,500 bounty.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how a flaw in a minor third-party tool like a forum plugin can cascade into access over an AI company's most sensitive internal systems, including source code and employee accounts tied to flagship products. It underscores the growing attack surface created by integrating third-party services with core developer infrastructure at leading AI labs, and highlights the value of bug bounty programs in catching such chains before malicious actors do.
- Hacktron AI chained an image library bug with an SSO flaw to hijack OpenAI employee accounts.
- The exploit gave access to ChatGPT, Codex accounts, and OpenAI's internal GitHub monorepo.
- OpenAI fixed the vulnerability within 14 hours and paid a $6,500 bug bounty.
Source: tomshardware.com — Etiido Uko, 2026-09-18
Published there as: “Hackers breach OpenAI using Claude tools, gaining access to employee accounts and the company's internal codebase — attackers initiated a 'harmless' pull request as proof of the hack”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.