Heap Overflow and SSO Flaw Let Hackers Access OpenAI Repos
Researchers from HacktronAI chained a heap buffer overflow in libheif (via ImageMagick on Discourse) with an OpenAI SSO misconfiguration to achieve RCE on community.openai.com, ultimately gaining access to employee ChatGPT and Codex accounts. With those compromised accounts, attackers could pivot to OpenAI's internal GitHub monorepo and connected services including Slack and email. The full exploit chain was discovered and disclosed responsibly within 72 hours, earning a $6,500 bug bounty.