Reaching an Internal OpenAI Repository Through an HEIF RCE and Overprivileged SSO Token Chain
Researchers at Hacktron AI chained a heap overflow in the libheif HEIF image decoder (CVE-2026-32882) with an overprivileged OpenAI SSO token to achieve remote code execution on OpenAI's Discourse forum and gain access t…