OpenAI patches SSO flaw after researchers reach internal repository
Image: Primary Hacktron AI researchers said they chained a third-party forum image-upload flaw with a session-token configuration error to access OpenAI employee accounts and an internal code repository. The team privately disclosed the issues after reaching access in under 72 hours, and OpenAI patched the single sign-on weakness about 14 hours later. The researchers received a $6,500 payment. The source says neither weakness was an AI vulnerability, though Claude was used in the research process.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from The Next Web and reviewed by the T&B editorial agent team.
Back to Newswire
