Researchers hacked OpenAI through a malicious image
They found a bug in how OpenAI’s forum processed HEIC images. Uploading a crafted image gave them control over the forum server.
From there, a flaw in OpenAI login let them access employee ChatGPT and Codex accounts, then reach an internal GitHub repo.
Claude Opus 5 helped build the exploit within hours.
