Post #4107679
2026-07-23 11:10 UTC
@TheoEsc@mastodon.social
"got passed the allowlist" still means it had access to arbitrarily execute code. And arbitrary code execution leads to... Arbitrary code execution.
Replies (1)
-
@TheoEsc@mastodon.social 2026-07-23 14:17
@shaknais@mastodon.social That doesn't really make sense. It didn't have "access to arbitrarily execute code", it had access to make HTTP calls to limited uris through OpenAI's proxy. It was able to escalate that to unlimited HTTP calls, and then use those to exploit a vulnerability in a different company's (HuggingFace) website and execute code on that company's servers. Whatever permissions it had at OpenAI should not give it arbitrary access to HuggingFace, a completely different entity.