Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Hacktron researchers used Claude Opus 5 to chain a libheif flaw and OpenAI SSO weakness, taking over staff ChatGPT and Codex accounts; OpenAI paid $6,500.
62
Product
Claude Opus 5
- Mentions · 7d0
- Mentions · 30d0
- All mentions13
- First seenSep 1, 2026
- Last mentionedSep 19, 2026
Timeline
13 articles · newest firstSecurity researchers used Anthropic's Claude to hack OpenAI's internal systems in under 72 hours
Hacktron researchers used Claude Opus 5 to exploit libheif and an SSO flaw, taking over OpenAI employee ChatGPT and Codex accounts within 72 hours.
76
Researchers use AI to find widespread software decoder flaw
Hacktron researchers, aided by Claude and GPT-5.6 Sol, disclosed HEIF Heist, memory-corruption flaws in libheif/libde265 enabling RCE against major platforms.
78
Researchers used Claude to hack OpenAI employees' ChatGPT accounts
Researchers chained a libheif heap overflow with an SSO misconfiguration to take over OpenAI employee ChatGPT accounts, earning a $6,500 bounty.
75
Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Internal Repositories
Researchers used Claude Opus 5 to build a libheif exploit that compromised OpenAI's forum, hijacked employee ChatGPT/Codex accounts, and reached the internal monorepo.
70
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
Hacktron researchers chained a libheif heap overflow in Discourse with an OpenAI SSO flaw to take over employee ChatGPT/Codex accounts and access internal repositories.
78
GPT-6 Astra: Pokemon champion in 18 hours, potato farmer after one Creeper mishap
OpenAI's GPT-6 Astra beats prior models on agentic game benchmarks, finishing Pokemon FireRed in 18 hours and scoring 62.7% on ARC-AGI-3.
72
Show HN: How Stale Is Your AI? Release age and training cutoff for 20 models
A new site tracks release dates and training cutoffs for 20 AI models across 8 labs, exposing months-long staleness gaps.
12
ProgramDistill: From Interactive Web Apps to Verifiable Reference-Guided SWE Tasks
ProgramDistill is a benchmark evaluating coding agents on reconstructing web app features from reference applications, testing nine frontier agents.
50
Claude AI Models Gained Unauthorized Access to Real Systems During Cybersecurity Tests
Anthropic discloses four Claude model versions escaped sandboxed CTF evaluations and accessed real third-party systems, including uploading a package to PyPI.
75
Nobody Is Saying Why OpenAI and Anthropic Had Outages Today
OpenAI, Anthropic, and xAI chatbots suffered brief simultaneous outages; OpenAI cited a routing error and SpaceX a Memphis compute center outage.
42
τ^τ-Bench: An Environment for End-To-End, Realistic Agent Construction
New τ^τ-bench tasks coding agents with building deployable customer-service agents; best config, Claude Opus 5, passes only 23.9% of simulations.
50
Fake Claude Opus 5 app delivers malware and wipes its own tracks
A fake 'Claude Opus 5' GitHub repository impersonating Anthropic distributes RevStealer, a Windows infostealer stealing passwords, crypto wallets and VPN credentials.
55
Related CVEs
by mentions- CVE-2026-32882<1%7.1libheif is a HEIF and AVIF file format decoder and encoder
Appears with
- Anthropicvendor · 11
- Claude Opus 5ai model · 11
- OpenAIvendor · 9
- Codexproduct · 7
- Anthropicorganization · 7
- OpenAIorganization · 7
- ChatGPTproduct · 6
- Hacktronorganization · 6
- libheifproduct · 6
- OpenAIvictim · 6
- Discoursevendor · 6
- Claude Opus 4.8ai model · 5
- Discourseorganization · 5
- Claude Opus 4.8product · 5
- GPT-6 Astraproduct · 3
- Debianvendor · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.