CYBERSECURITYTRACKER
Permanent story citation

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7897

As cited

Copy frozen at (site build).

ai security

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Researchers at Hacktron used Anthropic's Claude Opus 5 to chain two vulnerabilities in OpenAI's systems, first exploiting a bug in the public help forum and then leveraging a weakness in OpenAI's login system to compromise multiple employee accounts and access an internal code repository.

Why it matters: OpenAI staff and organizations relying on OpenAI's security should assess whether their accounts or repositories were affected by this chain and review authentication controls to prevent similar account takeovers.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary