AI-created exploit and login errors opened the way to internal OpenAI code
Researchers at security firm Hacktron used Claude to create a working exploit for a vulnerability in an image processing library, then linked it to a vulnerability in OpenAI’s login system to take over employees’ ChatGPT and Codex accounts, and finally gained access to internal code repositories. The entry point was OpenAI’s community forum, community.openai.com, which … Read more