Researchers Reached OpenAI's Private Monorepo via Discourse Forum Bug, Earned $6,500 Bounty
ChrisGPT · x · 2026-09-18
Three researchers found a vulnerability in the Discourse system hosting OpenAI's community forums, obtained auth tokens that also worked on an employee's ChatGPT/GitHub access, and reached OpenAI's private monorepo. They stopped short of sensitive material, proved access with a harmless pull request, responsibly disclosed, and were paid $6,500. No evidence model weights were accessed.
More from Companies & People
- MiniMax joins Singapore's Singtel AI Pass, bundling tools into 200+ government-backed AI courses — MiniMax_AI · 2026-09-18
- MiniMax Joins Singapore's AI Pass, Powering 200+ SkillsFuture Courses — MiniMax_AI · 2026-09-18
- Sakana AI expands Tokyo hiring, FIG research collective invites neuroscientists to apply — kaixhin · 2026-09-18
- Anthropic unveils three metrics to track AI self-development, agent oversight and compute allocation — pstAsiatech · 2026-09-18
- Axiom opens 20+ roles across model, eval, hardware design amid hypergrowth — ankurhandos · 2026-09-18
- Musk says X Holdings is taking shape as investor floats Tesla-SpaceX merger — beffjezos · 2026-09-18