Vulnerabilities··7 min read
Claude Opus 5 turned an undocumented image bug into access to OpenAI's internal code repo
Hacktron researchers chained a HEIF image flaw in OpenAI's Discourse forum to an SSO weakness and reached an internal repo. If you self-host Discourse or process user images, patch now.
OpenAIDiscourselibheif