Post #4108051

@shaknais@mastodon.social That doesn't really make sense. It didn't have "access to arbitrarily execute code", it had access to make HTTP calls to limited uris through OpenAI's proxy. It was able to escalate that to unlimited HTTP calls, and then use those to exploit a vulnerability in a different company's (HuggingFace) website and execute code on that company's servers. Whatever permissions it had at OpenAI should not give it arbitrary access to HuggingFace, a completely different entity.