Three hackers breached OpenAI's internal code repository using Claude for under $3,000

Three external security researchers exploited a vulnerability in OpenAI's community forum image processing and a single sign-on misconfiguration to take over an employee's ChatGPT and Codex accounts, then used the bound GitHub permissions to submit a pull request to OpenAI's internal code repository. The researchers said they did not view sensitive source code, highlighting risks in AI agent account permissions and internal system isolation.