PulseAugur
EN
LIVE 05:19:35

Hackers compromise OpenAI employee accounts via forum vulnerability

By PulseAugur Editorial · [1 sources] ·

Hackers successfully exploited two critical vulnerabilities to gain access to multiple OpenAI employees' ChatGPT and Codex accounts on July 25, 2026. This access allowed them to view internal OpenAI repositories, and they demonstrated this by opening a pull request in OpenAI's internal monorepo. The vulnerabilities stemmed from an SSO misconfiguration in OpenAI's identity infrastructure and a libheif RCE in the community forum used by OpenAI. The researchers reported the issue to OpenAI, which was patched within 14 hours, and a $6,500 bounty was awarded, though OpenAI clarified the bounty was for the OpenAI-specific finding, not the Discourse forum vulnerability. AI

IMPACT Highlights the critical need for robust security practices across all integrated services, not just core AI platforms.

RANK_REASON Security researchers disclosed vulnerabilities in a third-party forum used by OpenAI, leading to a limited compromise of employee accounts.

Read on Hacker News — AI stories ≥50 points →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Hackers compromise OpenAI employee accounts via forum vulnerability

How we ranked this

Signal score
19 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security researchers disclosed vulnerabilities in a third-party forum used by OpenAI, leading to a limited compromise of employee accounts.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. Hacker News — AI stories ≥50 points TIER_1 Svenska(SV) · Handy-Man ·

    Hacking OpenAI

RELATED ENTITIES

RELATED TOPICS