Three researchers with Claude and Codex gained write access to OpenAI's monorepo in two days
andersonbcdefg · x · 2026-09-18
A wild security disclosure: in late July, "three guys with Claude and Codex subscriptions" used Opus 5 to access OpenAI auth tokens and gain write access to OpenAI's monorepo (openai/openai) over two days.
- The entire effort was assisted by AI coding tools, showcasing the double-edged nature of agentic coding capabilities
- Details are in the linked writeup; the episode exposes how cheaply external researchers could breach a frontier AI lab's internal permission boundaries
More from coding & agent
- Why LLM-Written Docs Fail: Models Optimize for Punchiness, Not Readability — mervenoyann · 2026-11-04
- OpenAI DevDay demo shows forking agent task history at any step — paw_lean · 2026-11-04
- Veteran game dev: "AI builds a full game in a day" posts are mostly hype — bendee983 · 2026-11-04
- Dev builds interactive Excel-to-dashboard with ChatGPT, shares the prompt — TermRemarkable665 · 2026-11-04
- Agents cut dev time from weeks to a day; bottleneck moved to specs and review — Suspicious_Orchid770 · 2026-11-04
- Orgo, a YC-backed platform giving AI agents their own cloud desktops, claims 1,000+ teams — Scobleizer · 2026-11-04