
AI
Hacktron Shows AI-Assisted Path From OpenAI Forum Bug to Internal Repos
Security firm Hacktron disclosed a July 2026 chain that combined a Discourse image-processing flaw with an OpenAI SSO token issue—then used an employee Codex session to open a harmless PR as proof, without reading source. OpenAI fixed the identity bug within about 14 hours and paid a $6,500 bounty.




