I Got Root on Meta AI's Infrastructure Using a Chat Prompt

https://netguard24-7.com/blog/meta-ai-root

by cybrdude • 4 months ago

6 3 4 months ago

rvz• 4 months ago

Everyone should care, but it seems no-one here does. (Because they are too busy vibe-coding their infrastructure with AI agents.)

ShowalkKama• 4 months ago

wer impact?

Just because you have root it doesn't mean it's a vulnerability. Can he read the data of other customers? Can he interact with the internal network? Do you want to know how you can get code execution on microsoft's servers? Easy, go to github and spin up a github action.

The SSRF section does NOT prove SSRF, just because you can make a server interact with attacker supplied urls it doesn't automatically mean it can reach internal things and it does not automatically mean it's exploitable, far from it.

The user location leak is also not a leak since it's fair to assume that the user already knows his own physical location. It'd be interesting if there was a way to reveal the location of other users but alas that isn't mentioned, let alone proved.

BoredPositron• 4 months ago

nothingburger and the headline is hyperbole clickbait.

I Got Root on Meta AI's Infrastructure Using a Chat Prompt

Related Stories