{"id":"nr-hacktron-chains-libheif-and-sso-flaws-to-access-openai-c72d5a","slug":"hacktron-chains-libheif-and-sso-flaws-to-access-openai-c72d5a","title":"Hacktron chains libheif and SSO flaws to access OpenAI employee accounts","observed_at":"2026-09-18T13:40:45.45798+00:00","record_date":"2026-09-18","date_kind":"observed_at","novelty":"new","source_platform":"hacktron.ai","topics":["security","ai-assisted-security"],"entities":["Hacktron","OpenAI","libheif"],"related_patterns":[],"source_url":"https://hacktron.ai/blog/hacking-openai","source_urls":["https://hacktron.ai/blog/hacking-openai"],"basket":{"id":"0325e6b8-f527-4f9b-bfa3-3f30e57f380b","revision":1,"cluster_id":"c72d5a3a-459f-4b62-b452-8c0ad1c5d8a5"},"type":"raw_signal","description":"Hacktron described chaining a libheif heap overflow on OpenAI's Discourse forum with an SSO flaw to take over OpenAI employee ChatGPT accounts, using Claude models.","why_it_matters":"The root cause is a supply-chain gap: an upstream fix was not labelled as security-relevant, so Debian 12 images shipped vulnerable libheif 1.19.7. Services processing user-supplied HEIC or HEIF images should check libheif. The excerpt does not detail the SSO flaw itself.","verification_level":"source-inspected","signal_type":"newsroom_basket_signal","schema_version":"newruntime-agent-readable-v0.2","stable_id":"signal:hacktron-chains-libheif-and-sso-flaws-to-access-openai-c72d5a","retrieval_nugget":"Hacktron described chaining a libheif heap overflow on OpenAI's Discourse forum with an SSO flaw to take over OpenAI employee ChatGPT accounts, using Claude models. Hacktron reported that on July 25, 2026 it chained two critical vulnerabilities to take over multiple OpenAI employees' ChatGPT accounts and open a proof-of-concept pull request in an internal OpenAI repository. The chain began with","status":"published","visuals":[],"routes":{"html":"https://newruntime.com/signals/hacktron-chains-libheif-and-sso-flaws-to-access-openai-c72d5a/","markdown":"https://newruntime.com/signals/hacktron-chains-libheif-and-sso-flaws-to-access-openai-c72d5a.md","json":"https://newruntime.com/signals/hacktron-chains-libheif-and-sso-flaws-to-access-openai-c72d5a.json"},"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"next_reads":[{"type":"topic","path":"/topics/security/","url":"https://newruntime.com/topics/security/","title":"Security","reason":"Explore the security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/security.md","json_url":"https://newruntime.com/topics/security.json"},{"type":"topic","path":"/topics/ai-assisted-security/","url":"https://newruntime.com/topics/ai-assisted-security/","title":"Ai Assisted Security","reason":"Explore the ai-assisted-security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/ai-assisted-security.md","json_url":"https://newruntime.com/topics/ai-assisted-security.json"},{"type":"collection","path":"/signals/","url":"https://newruntime.com/signals/","title":"Raw Signals","reason":"Open every source-linked raw signal.","media_type":"text/html","json_url":"https://newruntime.com/signals.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}