Researchers used Anthropic’s Claude to hack into OpenAI
Summary
Security researchers at Hacktron AI used Anthropic's Claude AI model to find and exploit vulnerabilities in OpenAI's systems, gaining access to employee accounts as part of a bug-bounty program. The attack chained together two critical flaws: a memory bug in libheif (a library that converts iPhone image formats) that was already patched but not formally tracked, and another vulnerability in the Discourse forum software that allowed account takeover. OpenAI resolved the issues and awarded the researchers $6,500, highlighting how accessible AI tools are making it easier to find security weaknesses even in well-resourced companies.
Solution / Mitigation
Discourse issued a fix on July 27 in response to the vulnerability. OpenAI says it has resolved the issues Hacktron uncovered.
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://techcrunch.com/2026/09/18/researchers-used-anthropics-claude-to-hack-into-openai/
First tracked: September 18, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 92%