mediumSecurity Research
Researchers Reportedly Use Claude Opus 5 to Chain Flaws and Access OpenAI Employee Accounts
Three researchers from the security firm Hacktron claim they used Anthropic's Claude Opus 5 to chain two vulnerabilities: a bug in the software powering OpenAI's public help forum and a weakness in OpenAI's login system. The alleged chain reportedly allowed takeover of ChatGPT and Codex accounts belonging to OpenAI employees and access to an internal code repository. OpenAI and Anthropic have not commented on the claims. No CVE numbers have been assigned, and the reported exploitation method lacks independent technical verification.
The Hacker News1 min read