
AI Models
Hacktron Chained libheif Flaw and OpenAI SSO Misconfiguration to Reach Internal Repos
Hacktron researchers chained a libheif heap buffer overflow with an OpenAI SSO misconfiguration to take over employee ChatGPT and Codex accounts and reach internal repositories. The chain ran from HEIC image uploads on community.openai.com through ImageMagick and Discourse, with the full timeline from discovery to repository access taking under 72 hours.
Sep 1810 minNeura News