Event ·Multi-source

OpenAI 的 SSO 存在关键问题

他们利用 Discourse 论坛中的 RCE 漏洞，将攻击扩展到了 OpenAI 的其他服务。该漏洞允许未经授权访问 OpenAI 的 SSO 系统。攻击者可以绕过身份验证机制，获取对 OpenAI 多个服务的访问权限。

Current read

OpenAI 的 SSO 系统被发现了严重漏洞，攻击者可以利用这个漏洞绕过身份验证，访问他们的其他服务，这很严重。

11 sources78° AI heatLast updated 2026/9/20 00:58:06

Evidence

11 sources

Primary sourceAI Will

2026/9/20 00:58:06View source

Related source 1IT之家

2026/9/18 05:26:43View source

Related source 2techcrunch

2026/9/18 14:00:14View source

Related source 3Genk

2026/9/20 11:01:00View source

Related source 4宝玉

2026/9/18 04:57:51View source

Related source 5CNBC Indonesia Tech

2026/9/18 06:00:00View source

Related source 6VTV Công nghệ

2026/9/18 09:35:00View source

Related source 7The Rundown AI

2026/9/18 10:30:19View source

Related source 8theverge

2026/9/18 15:30:16View source

Related source 9elvis

2026/9/18 16:45:34View source

Related source 10Decoder

2026/9/18 17:20:30View source

Conflict check

Dedup data only shows that these sources discuss the same event, not that they agree. There is no structured supporting or refuting evidence yet, so no conflict is inferred automatically.

Open the story