The HEIF Heist vulnerability extends to other platforms utilizing the same decoding tool, including Meta, Slack, and GitHub Enterprise. OpenAI patched the flaw within 14 hours of the report and paid a $6,500 bug bounty. The researchers provided proof of the breach by submitting a harmless pull request to the internal codebase without downloading any proprietary source code.
Wednesday, October 21, 2026
Story
Hacktron AI Researchers Breach OpenAI Internal Code Using Claude Opus 5
Cybersecurity29 days ago
Researchers from Hacktron AI accessed OpenAI's private software repository by exploiting a memory corruption flaw in the libheif image decoding library. The team used Anthropic's Claude Opus 5 to develop the exploit in less than 72 hours for under $3,000 in tokens, bypassing security by uploading a specially crafted HEIF image to a public forum. The attack chain included a single sign-on vulnerability that granted the researchers control over employee Codex accounts and access to the company's internal monorepo.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.