Hacktron breached OpenAI in under 72 hours via chained HEIF and SSO flaws
joshua_saxe · x · 2026-09-20
Hacktron team says it hacked OpenAI in under 72 hours
- Chain: HEIF upload → libheif heap overflow → RCE → OpenAI SSO flaw → ChatGPT/Codex account takeover → connected GitHub → harmless PR in OpenAI's internal monorepo to demonstrate impact
- OpenAI fixed the SSO issue 14 hours after disclosure
- Work by rootxharsh, S1r1u5, and iamnoooob; full technical write-up published
Dino Dai Zovi amplified it as a prime example of AI amplifying human attackers' capability.
More from Safety
- Hundreds of offensive ARTEX AI agents deployed across VPS providers, hitting Korean banks — IgorCarron · 2026-11-04
- UK NCSC: AI will speed up and scale existing cyber attacks, not create new ones — koltregaskes · 2026-11-04
- Anthropic says it may imminently hit RSP threshold for AI-accelerated R&D, releases provable inference work — tobyordoxford · 2026-11-04
- Hackers reset French blood service freezers from -30°C to 110°C in supply-chain cyberattack — LuizaJarovsky · 2026-11-04
- Google says it removed post-employment non-disparagement clauses from new-hire terms — HaydnBelfield · 2026-11-04
- Claude doesn't really forget: Anthropic's privacy policy allows records retention up to 7 years — nikola_mr64990 · 2026-11-04