{"data":{"id":"3d1c1b80-acef-4f39-a274-c564b2934a9f","title":"After spending billions, OpenAI still has gaps in its cybersecurity","summary":"Hacktron researchers chained two critical vulnerabilities, starting with a flaw in an image processing library that enabled remote code execution, to compromise multiple OpenAI employees' ChatGPT accounts and reach internal repositories. Separately, Accomplish researchers found two ways out of the OpenAI Codex sandbox, reported on August 12, 2026, and fixed within eight days.","solution":"The vulnerabilities were fixed after reporting under a coordinated disclosure program. Dubey advised that enterprises should not rely on sandboxing as a standalone control and should add controls to secure the larger system if a sandbox is compromised.","labels":["security","safety"],"sourceUrl":"https://www.csoonline.com/article/4224453/after-spending-billions-openai-still-has-gaps-in-its-cybersecurity.html","publishedAt":"2026-09-21T16:24:03.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Anthropic"],"affectedVendorsRaw":["OpenAI","ChatGPT","Codex","Anthropic","Claude"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-21T16:24:03.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}