writeups.xyz / The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate

Submitter : c2a

Date: 23 May 2024

Bounty : undisclosed

Vulnerabilities :

• AI
• Malicious AI Model
• RCE
• Lateral Movement
• TCP Injection

Programs :

• Replicate

Authors :

• Shir Tamari (@Shirtamari)
• Sagi Tzadik (@Sagitz_)

Link :
https://www.wiz.io/blog/wiz-research-discovers-critical-vulnerability-in-replicate