WSJ: Three researchers used Claude Opus 5 to chain a Discourse bug into access to OpenAI's private code

WSJ：三名研究人员用 Claude Opus 5 借 Discourse 漏洞访问 OpenAI 私有代码

WSJ reports three researchers used Claude Opus 5 to chain a Discourse vulnerability into access to OpenAI employee auth tokens. Some forum tokens also worked on ChatGPT and reached OpenAI's GitHub services. The post doesn't spell out how the bug was exploited or whether OpenAI has patched it.

Why it matters: Claude Opus 5 used to breach OpenAI's private repos—strong reversal that security and capability evaluation circles will debate. Deduction: WSJ doesn't disclose exploit details or OpenAI's post-incident response, leaving a factual gap.