OpenAI Pays $6,500 Bounty, Fixes SSO Bug 14 Hours After Report

teortaxesTex · x · 2026-09-18

Security researcher S1r1u5 disclosed bugs reported to both OpenAI and Discourse: OpenAI fixed the reported SSO issue roughly 14 hours after submission and paid a $6,500 bounty, while Discourse acknowledged on Sunday and shipped a fix by Monday after a Saturday report. Quoting teortaxesTex quips that reproducing it on OpenAI may be harder now.

Related event: White-hat team hijacked OpenAI employee accounts in 72 hours, sparking bounty backlash(10 posts)→

Original post →

More from Fun

Fun channel →