{"data":{"id":"b852c031-2ad6-4643-ae34-f3c2015189de","title":"AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code","summary":"Researchers used Claude (an AI assistant) to build a working exploit for an unpatched bug in a third-party image library, then chained it with a flaw in OpenAI's sign-in system to gain remote code execution (the ability to run commands on someone else's computer) on OpenAI's community forum and take over employee accounts. The vulnerability stemmed from the forum accepting image uploads that were processed by ImageMagick with an outdated library, combined with sign-in tokens that granted excessive permissions to linked ChatGPT and GitHub accounts.","solution":"OpenAI narrowed the permissions on community sign-in tokens and revoked affected tokens and sessions. Discourse released a fix within two days that included image-processing sandboxing as an additional layer of defense, and published a security advisory.","labels":["security"],"sourceUrl":"https://www.securityweek.com/ai-built-exploit-and-sign-in-flaw-opened-path-to-internal-openai-code/","publishedAt":"2026-09-18T12:45:24.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain","model_theft"],"issueType":"news","affectedPackages":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI","Claude","ChatGPT","Codex","Discourse","ImageMagick","libheif"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-18T12:45:24.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}