Monday, September 21, 2026

Claude Opus 5 turned an undocumented image bug into access to OpenAI's internal code repo

Hacktron researchers chained a HEIF image flaw in OpenAI's Discourse forum to an SSO weakness and reached an internal repo. If you self-host Discourse or process user images, patch now.