Three cybersecurity researchers from India successfully infiltrated OpenAI’s community forum using a more advanced AI model from rival developer Anthropic, underscoring emerging risks posed by increasingly capable artificial intelligence tools in cyberattacks. The breach, disclosed via a detailed report from the researcher group Hacktron in late September 2026, revealed vulnerabilities in third-party software integrating with OpenAI.
What Happened
In late July 2026, the Hacktron team employed Anthropic’s Claude AI models to probe OpenAI’s community forum, a platform used by ChatGPT and Codex users for support and discussion. The forum requires sign-in via OpenAI accounts. Initially, they used the Claude Opus 4.8 model to identify a security flaw in Discourse, the forum’s third-party software, but could not exploit it successfully that night. When the upgraded Claude Opus 5 model was released the following day, they leveraged its enhanced capabilities to access some ChatGPT and Codex user accounts through the forum.
By compromising these accounts, Hacktron could view ongoing conversations within ChatGPT and Codex and potentially access linked applications such as email and Slack. Some compromised accounts belonged to OpenAI employees, granting attackers access to internal communications. The team’s exploit capitalized on the dependency on third-party services rather than OpenAI’s core codebase.
Key Facts
The Hacktron report confirms the use of Anthropic’s Claude Opus 4.8 and Opus 5 AI models during the breach. The exploited vulnerability resided in Discourse, which manages the OpenAI community forum. The incident occurred in late July 2026, and the findings were publicly disclosed in September 2026. OpenAI responded by narrowing permissions on community sign-in tokens and revoking affected tokens and sessions to mitigate the risk.
Hacktron estimates the attack required under three days to perform, a dramatic reduction from two to three months if conducted manually without AI assistance. The team has previously demonstrated similar hacks in platforms like Apple, Google, Facebook, Discord, and Microsoft Teams.
What This Means
This incident highlights a significant shift in cybersecurity risk: increasingly sophisticated AI tools enable hackers to conduct faster, more effective attacks, fundamentally changing the threat landscape. The use of powerful AI as a “force multiplier” for hacking means that penetration timelines are drastically compressed, heightening urgency for defense mechanisms to evolve equally rapidly. For OpenAI and its users, this breach reveals how third-party software can be a critical attack vector, stressing the need for comprehensive security reviews across all software layers and dependencies.
More broadly, the case illustrates a new danger where AI models themselves become tools for malicious activity, potentially empowering less experienced attackers to perform sophisticated breaches. As AI capabilities race ahead, security safeguards and policies must adapt to mitigate not only traditional hacking methods but also AI-enhanced threats. Companies running AI-based platforms need to anticipate that attackers may adopt equally advanced AI, necessitating investments in robust AI-centric cybersecurity defenses and thorough vetting of third-party integrations.
Background
Bug bounty programs, which reward ethical hackers for finding vulnerabilities, are common in the tech industry and underpin the activities of the Hacktron team. Their hack into OpenAI’s forum was conducted under such a program, aiming to identify and responsibly disclose security weaknesses. The researchers emphasized their ethical stance, claiming their intent was to assist OpenAI in bolstering its defenses.
Concerns about security of AI models and platforms have grown recently after incidents such as the Hugging Face hack. Experts, including cybersecurity policy analyst Nicholas Leiserson, have stressed that powerful AI technologies represent national security concerns, with laboratories prioritizing rapid development risking exposure to cyber threats.
What Remains Unclear
The full extent of user accounts affected by the breach, the identity of any malicious actors beyond the ethical researchers, and the ongoing status of remediation efforts remain unconfirmed. It is also unclear how widely OpenAI’s users have been notified or whether additional vulnerabilities exist undetected in their broader infrastructure.
What Comes Next
Following the disclosure, OpenAI narrowed permissions on the community forum’s sign-in tokens and revoked the tokens linked to compromised accounts. The company has not disclosed further patch releases or security upgrades explicitly. AI developers and security experts continue to monitor risks related to AI-driven intrusion techniques and third-party software dependencies.
Sources
This article is based on reporting and publicly available information from the following sources:
Read more Cybersecurity stories on Goka World News.