June 4, 2026 · VibeWShield Team
OpenAI Assistants API: Thread-ID Enumeration and Hijacking
Thread IDs in the Assistants API are long but predictable in vibe-coded chat UIs. A classic IDOR lets attackers read prior conversations by incrementing a counter on your side.
