AIThe Hacker Newsabout 2 hours ago
Writer AI Flaw Leaks Session Tokens Across Tenants
1 min read
A patched critical vulnerability in Writer's AI platform, codenamed WriteOut, allowed cross-tenant session token theft via malicious agent preview links. An attacker could hijack any victim's Writer account, accessing private chats, documents, and LLM credentials. Writer fixed the issue by isolating session cookies from sandbox previews.
Level
Hype check
Tap to vote and see what everyone thinks.
