How I Found a HIGH-Severity AI Security Issue on Khan Academy's VDP
My first HackerOne report landed as a HIGH-severity information disclosure on Khan Academy. The methodology, the exact attack vector, and 7 other findings I bundled in.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.