Hacking OpenAI
On July 25, 2026, a group known as HacktronAI discovered and exploited critical vulnerabilities in OpenAI's systems. The team managed to gain access to multiple ChatGPT employee accounts, which provided them with entry into internal OpenAI repositories and other connected systems. To demonstrate the impact of their findings, they created a harmless pull request in OpenAI's internal repository, notifying the company directly and seeking acknowledgment.
OpenAI acknowledged the issue and released a patch two days later. The team also reported the vulnerabilities to Discourse, the forum hosting OpenAI's community, which quickly fixed the issue. The discovery led to an investigation called "HEIF Heist," revealing that several widely-used software applications depend on a single image-processing library called libheif.
HacktronAI advises users to self-host Discourse and update their installations to protect against potential RCE attacks.
Written by urgent.news from Lobsters's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Hacking OpenAI hacktron.ai
