Exploiting Heap Overflow and SSO Misconfiguration to Compromise OpenAI Internal Repositories

A heap overflow vulnerability in libheif and an SSO misconfiguration were exploited to gain access to OpenAI's internal repositories. The researchers coordinated with OpenAI and Discourse to resolve the issues, highlighting critical security flaws in identity infrastructure and image processing libraries.

Comments

Read original article