Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

By info@thehackernews.com (The Hacker News)

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in cross-tenant compromise. The one-click vulnerability has been codenamed WriteOut by the Sand Security Research team. "An outsider could go from having no access to taking over any Writer AI