flâneur

Hacking OpenAI | Hacktron AI

hacktron.ai · 1,789 words · saved by 3 readers

A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories

A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories September 13, 202611 min read Intro On July 25, 2026, we chained two critical vulnerabilities to compromise multiple OpenAI employees’ ChatGPT accounts. With these accounts, we could then access internal OpenAI repositories, and potentially many other connectors. To prove we had in fact gained the access we believed without allowing ourselves to learn any sensitive information, we used the employee’s Codex to open a PR #1186742 in OpenAI’s internal monorepo openai/openai. Exploit chain libheifImage…

saved by

related reading