OpenAI forum RCE via HEIC/HEIF image upload
This matters because it demonstrates a real-world vulnerability in OpenAI's systems that could be exploited to gain unauthorized access to user accounts and internal resources, highlighting the importance of security in large AI platforms.
A complete attack chain was detailed showing how uploading a HEIC/HEIF image to the OpenAI forum could trigger a libheif heap overflow, leading to remote code execution (RCE) on the forum. This RCE was then used to exploit an OpenAI SSO vulnerability, allowing attackers to take over ChatGPT and Codex accounts and access associated GitHub accounts to submit PRs to internal code repositories.
2/ 完整攻击链如下： 上传 HEIC/HEIF 图片 → ImageMagick 解码 → 触发 libheif 堆溢出 → 在 OpenAI 论坛实现 RCE → 利用 OpenAI SSO 漏洞 → 接管 ChatGPT、Codex 账户 → 访问关联的 GitHub → 向内部代码库提交 PR。 💬 1 🔄 0 ❤️ 0 👀 116 📊 1 ⚡
