Malicious image plus OpenAI SSO flaw could chain to employee ChatGPT and Codex accounts
ccerrato147 · x · 2026-09-18
Security researcher ccerrato147 lays out a combined attack chain against OpenAI:
- libheif heap overflow: an image-parsing bug that goes unpatched because the fix was never labeled a security fix; uploading a malicious image to the community forum yields remote code execution.
- OpenAI SSO misconfiguration: the same identity layer spans ChatGPT, Codex, GitHub orgs, Slack, email — and a public Discourse forum, with no separation between low-trust community surfaces and core accounts.
Compromising any service using OpenAI SSO could ride straight into employee ChatGPT and Codex accounts. The author urges OpenAI to prioritize cybersecurity, hire specialists, and raise bug bounty payouts.
More from Companies & People
- John Lewis's worst-reviewed Christmas ad: why it wants to stop cash gift cards — aakashgupta · 2026-11-04
- Technical founders: as CEO, storytelling is the core job you can't skip — paigeinsf · 2026-11-04
- Andreessen: Agents Are Entering Enterprises as Chaos, Just Like PCs and Spreadsheets Did — Dan_Jeffries1 · 2026-11-04
- DeepMind, Cognition host bouldering social ahead of AI Engineer Code Summit — osanseviero · 2026-11-04
- Google says it removed post-employment non-disparagement clauses from new-hire terms — HaydnBelfield · 2026-11-04
- Accenture Accused of Publishing AI Paper Littered with AI Hallucinations — nordicinst · 2026-11-04