Breaking

Hacktron AI Says Claude Helped Researchers Reach OpenAI Internal Code Access

September 18, 2026 at 05:05 EDT

Security
AI Agents
Policy & Regulation

Hacktron AI says a three-researcher team used Anthropic's Claude Opus 5 to chain a Discourse image-processing flaw with an OpenAI single sign-on weakness, gaining access to employee ChatGPT and Codex accounts and proving internal repository access without reading sensitive code. OpenAI fixed the OpenAI-side issue after disclosure and paid a $6,500 bounty.

Sep 18, 2026 · OpenAI security incident

AI-assisted exploit reaches internal code access

A bug-bounty chain moved from a forum image upload flaw to employee ChatGPT and Codex access, then to a proof-of-access pull request in an internal repository.

<72h

Discovery to repo proof

14h

OpenAI-side fix confirmed

$6.5K

OpenAI-side bounty

8.8

Discourse CVSS score

Two clocks shaped the response

14hFix confirmed

<72hRepo proof path

Each block represents about twelve hours; labels show the reported values.

Exploit chain at a glance

HEIF upload→Discourse RCE→SSO flaw→Codex PR

Defensive read

Responsible disclosure and fast patching show how AI-assisted research can surface real weaknesses before abuse.

Risk read

A forum compromise crossed into AI accounts and connected code tools, raising questions about identity boundaries.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.