Event ·Multi-source

OpenAI 论坛存在 RCE 漏洞，可利用 SSO 接管账户

攻击链显示，上传 HEIC/HEIF 图片可触发 libheif 堆溢出，进而实现远程代码执行。该漏洞可利用 OpenAI SSO 漏洞，最终导致 ChatGPT 和 Codex 账户被接管，并访问关联的 GitHub 账户。

Current read

OpenAI 论坛的 RCE 漏洞很严重，能直接拿 ChatGPT 账户，建议用户检查是否被攻击。

11 sources78° AI heatLast updated 2026/9/20 00:58:00

Evidence

11 sources

Primary sourceAI Will

2026/9/20 00:58:00View source

Related source 1宝玉

2026/9/18 04:57:51View source

Related source 2IT之家

2026/9/18 05:26:43View source

Related source 3@OpenAIDevs

2026/9/18 16:10:55View source

Related source 4Decoder

2026/9/19 13:31:46View source

Related source 5SuperTechFans

2026/9/20 23:44:04View source

Related source 6techcrunch

2026/9/18 14:00:14View source

Related source 7theverge

2026/9/18 15:30:16View source

Related source 8The Business Times: Tech

2026/9/19 01:45:00View source

Related source 9Genk

2026/9/19 13:21:00View source

Related source 10OpenAI Blog

2026/9/21 00:00:00View source

Conflict check

Dedup data only shows that these sources discuss the same event, not that they agree. There is no structured supporting or refuting evidence yet, so no conflict is inferred automatically.

Open the story