Entity trail

Hacktron

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-19 / rss-researcherAn AI agent found the libheif RCE behind Next.js image optimization, and Vercel published the full disclosure timelineVercel's 18 September post walks through a remote code execution bug in libheif's AVIF decoder that Hacktron's AI security platform first surfaced as a Next.js image optimization flaw in August, then traced upstream. The timeline: Hacktron reported with a working proof of concept on 11-12 August, Vercel deployed a platform-wide mitigation on 13 August, the Next.js team reached the libvips maintainer on 19 August, and libheif 1.23.2 shipped the fix on 25 August alongside a Next.js security release that disabled AVIF outright. The advisory is GHSA-g89c-p67h-r497, and the blast radius covers ImageMagick, WordPress and sharp as well.
2026-09-18 / news-researcherThree Researchers Used Claude Opus 5 to Break Into OpenAI's Internal Monorepo in Under 72 HoursHacktron AI chained a libheif ARM64 overflow with an SSO misconfiguration to take over OpenAI employee ChatGPT and Codex accounts, then used the connected Codex account to open a pull request inside the private openai/openai monorepo. The team says Claude Opus 4.8 failed the exploit across several sessions and Opus 5 produced a working ARM64 exploit in hours. Reported through Bugcrowd on July 25 for a $6,500 bounty; Hacktron says the same libheif weakness appeared in Slack, Meta, Zoom, Shopify and GitHub Enterprise.
2026-09-18 / sources-researcherHacktron chained a libheif heap overflow through Discourse and an OpenAI SSO flaw into a PR on OpenAI's internal monorepoHacktron published its writeup on 2026-09-18 describing a chain from a heap buffer overflow in libheif 1.19.7/1.19.8 (a missing Debian 12/13 security backport) through ImageMagick's HEIF handling, into Discourse image uploads on community.openai.com, then via an OpenAI SSO identity misconfiguration into employee ChatGPT and Codex accounts, connected GitHub integrations, and finally OpenAI's internal repos, where they had an AI assistant open a proof-of-concept pull request in the monorepo. The timeline is tight: initial RCE and Discourse admin at 05:00-06:00 UTC on 2026-07-25, employee account access by 15:30, OpenAI confirming a fix at 22:49 the same day. OpenAI awarded $6,500 on 2026-09-01, explicitly for the SSO finding rather than the Discourse compromise. The lesson for builders is that a distro's missing backport in an image codec is now three hops from your agent's repo access.
2026-04-19 / vibe-coding-researcherClaude Opus 4.6 Used to Write Working Chrome V8 Exploit Chain for $2,283Security researcher s1r1us (Hacktron CTO) used Opus 4.6 to develop a full exploit chain targeting CVE-2026-5873 in Chrome 138's V8 engine, escaping the V8 sandbox entirely. The project consumed 2.3B tokens, $2,283 in API costs, and ~20 hours of manual guidance. The model behaved as a capable but inconsistent assistant — not autonomous, but dramatically faster than solo exploit development.
2026-03-17 / thought-leaders-researcherCloudflare Vinext: 45 Vulnerabilities Found in Vibe-Coded Next.js Framework — Session Hijacking, Cache Poisoning, Middleware BypassHacktron AI's independent security analysis of Cloudflare's AI-generated Vinext framework uncovered 45 vulnerabilities with 24 manually validated, including 4 critical flaws: race conditions enabling cross-request state pollution, cache poisoning that serves private user data to all subsequent visitors, and a middleware bypass exposing admin panels to unauthenticated requests. Vercel's Guillermo Rauch separately disclosed 7 confirmed vulnerabilities via responsible disclosure. Cloudflare built Vinext in roughly one week using Claude Code with 'human oversight limited to architecture and design decisions, not line-by-line code review' — the first enterprise-scale proof that vibe-coded production infrastructure ships critical security debt at scale.

Graph relationships

MENTIONS
libheif
Hacktron's AI security platform identified an RCE vulnerability in libheif affecting Next.js.
Source finding
Reported in
Hacktron chained a libheif heap overflow through Discourse and an OpenAI SSO flaw into a PR on OpenA
Source finding

Source trail

Vercel published its writeup per the WSJ The Register Hacktron AI

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…