Event ·Multi-source

Discourse 论坛存在 libheif 库漏洞，可导致远程代码执行

Discourse 论坛使用的 libheif 图像处理库存在漏洞，该漏洞此前已被上游修复但未标记为安全风险。攻击者只需上传恶意 HEIF 文件，就能在 OpenAI 论坛上实现远程代码执行。

Current read

Discourse 论坛有个漏洞，上传特定图片就能控制服务器，OpenAI 的论坛也受影响。

4 sources37° AI heatLast updated 2026/9/20 00:58:04

Evidence

4 sources

Primary sourceAI Will

2026/9/20 00:58:04View source

Related source 1IT之家

2026/9/18 05:26:43View source

Related source 2techcrunch

2026/9/18 14:00:14View source

Related source 3Genk

2026/9/20 11:01:00View source

Conflict check

Dedup data only shows that these sources discuss the same event, not that they agree. There is no structured supporting or refuting evidence yet, so no conflict is inferred automatically.

Open the story