---
title: "Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws"
type: signal
url: https://frontiernewswire.com/s/claude-opus-5-helped-researchers-take-over-openai-staff-accounts-via-49d288e6
published: 2026-09-19T10:01:10.000Z
byline: "Source: The Hacker News"
---

# Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Source: The Hacker News · Published 2026-09-19 · Canonical: https://frontiernewswire.com/s/claude-opus-5-helped-researchers-take-over-openai-staff-accounts-via-49d288e6

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a bug in the software that runs OpenAI's public help forum and moved through a weakness in OpenAI's own login system. This was security research,

In this story: [Claude Opus 5](https://frontiernewswire.com/models/claude-opus-5)

## Sources

- [Read the original at The Hacker News](https://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.html)

## Related on Frontier

- [OpenAI partners with Cathedral to test its security defenses and revamps its Security Bug Bounty program, including quadrupling rewards for critical findings (OpenAI)](https://frontiernewswire.com/s/openai-partners-with-cathedral-to-test-its-security-defenses-and-d675ae42)
- [Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link (Swati Khandelwal/The Hacker News)](https://frontiernewswire.com/s/researchers-are-paid-5k-for-reporting-a-bug-to-openai-that-would-let-e77dabdc)
- [Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish (Felix Rieseberg/@felixrieseberg)](https://frontiernewswire.com/s/anthropic-says-a-malicious-actor-used-access-to-cursors-marketplace-to-45e77194)
- [Preparing our next security sprint to harden OpenAI](https://frontiernewswire.com/s/preparing-our-next-security-sprint-to-harden-openai-eaf1d4f8)
- [Malicious Claude Code Extension Served in Cursor Supply Chain Attack](https://frontiernewswire.com/s/malicious-claude-code-extension-served-in-cursor-supply-chain-attack-d3db24b3)

---

[More Latest Signal](https://frontiernewswire.com/) · [Signals](https://frontiernewswire.com/verified-reporting)