大模型
www.aibase.com ·
白帽黑客借助 Claude 攻破 OpenAI 员工 ChatGPT 账户，获 6500 美元赏金
据《华尔街日报》9月18日报道，安全公司 Hacktron AI 的三名研究人员利用 Anthropic Claude 发现并利用 Discourse 安全上传功能漏洞（CVE-2026-45788），于7月23日发起入侵，获取了 OpenAI 论坛服务器的账户登录令牌。这些令牌意外地在 ChatGPT 及 OpenAI 的 GitHub 服务上同样有效，使研究人员得以读取 OpenAI 名为 Monorepo 的软件仓库文件（据称不含模型权重）。团队在意识到可访问敏感数据后停止攻击并向 OpenAI 报告，获得 6500 美元赏金。Discourse 称7月25日收到通知并于当日修复。Hacktron AI CTO 表示，该事件说明国家级攻击团队确有窥探美国 AI 机密的机会。相关模型版本与时间线来自单一转述，尚待独立核实。
AI推荐理由 转述《华尔街日报》报道，事件链条具体（CVE-2026-45788、Discourse 安全上传漏洞、7月23日入侵、7月25日修复、6500美元赏金），并给出 Hacktron AI CTO 的直接引语，信息密度较高。但来源为 AIbase 二手转述，未提供 WSJ 原文链接，且涉及 Claude Opus 4.8/Opus 5 等未来版本与 2026 年时间线，无法独立核实，需保留不确定性。对 AI 安全、Agent 工具被用于攻击、企业代码仓库暴露风险有实际参考价值。
72
正文
White Hat Hackers Breach OpenAI Employee ChatGPT Accounts Using Claude, Earn $6,500 Bounty
AIbase基地
Published inAI News · 4 min read · Sep 18, 2026
2
According to a report by The Wall Street Journal on September 18, independent security researchers successfully hacked into an OpenAI employee's ChatGPT account using Anthropic Claude, gaining access to the company's private software code repository.
The involved team came from the security company Hacktron AI, which had previously participated in OpenAI's bug bounty program. After discovering the vulnerability, the team quickly reported it to OpenAI, which then paid a bounty of $6,500 (approximately 43,692 RMB).
The Vulnerability was on Discourse, and the Token Actually Worked on ChatGPT
The intrusion began on July 23. On that day, Hacktron researchers discovered a vulnerability in how Discourse handled specific image files and used a special version of Claude Opus 4.8, available only to qualified cybersecurity professionals, to request code that exploits this vulnerability—this first attempt failed; that night, Anthropic released Opus 5, and the next day, Claude found a way to exploit it.
The exploited vulnerability is numbered CVE-2026-45788, an unrestricted upload vulnerability in the Discourse secure upload feature. Attackers can expose secure upload content if they know the protected upload URL, without requiring authentication to launch a remote attack. Discourse stated that it was notified on July 25 and fixed the issue the same day.
The attack allowed researchers to access the Discourse server hosting OpenAI's forum and obtain account login tokens. What they did not expect was that these tokens were effective on ChatGPT, including those of OpenAI employees, and could also be used to access OpenAI's GitHub service.
As a result, researchers were able to read files in a large software repository called "Monorepo." According to insiders, Monorepo is the repository where OpenAI stores algorithm secrets to make models faster and more efficient, but it does not contain model weights. They stopped the attack after realizing they could access sensitive data, having previously submitted a document modification request with the label "Hacktron AI Team PoC" as proof (which was not accepted).
"We Are Just Three People with Claude and Codex Subscriptions"
Mohan Pedhapati, CTO of Hacktron AI, said the attack shows that state-sponsored advanced cyber teams indeed have real opportunities to glimpse American AI secrets: "I don't think we are smarter than foreign threats. We are just three people with Claude and Codex subscriptions."
AnthropicClaudeOpenAIHacktronAICVE-2026-45788
This article is from AIbase Daily
Scan to view
Welcome to the [AI Daily] column! This is your daily guide to exploring the world of artificial intelligence. Every day, we present you with hot topics in the AI field, focusing on developers, helping you understand technical trends, and learning about innovative AI product applications.
—— Created by the AIbase Daily Team
© Copyright AIbase Base 2024, Click to View Source -