pentester.land· May 23, 2024· by Shir Tamari (@shirtamari), Sagi Tzadik (@sagitz_)

The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate

Open Original Article ↗
Target Program: Replicate
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#AI#Malicious AI model#RCE#Lateral movement#TCP injection