The Frontier · Tags
#bounty
2 published articles
Hacktron's OpenAI bounty: Discourse RCE met an SSO bridge
A July chain on community.openai.com reached ChatGPT and Codex. OpenAI paid $6,500 for the identity finding. Discourse's HEIF advisory tells self-hosters to rebuild.
Forum to SSO to Codex: where OpenAI's identity boundary broke
Hacktron's July 2026 chain turned a Discourse image-upload bug into ChatGPT and Codex session access. The advisory and the bounty note separate the forum RCE from the SSO finding.