Bypassing an AI platform’s Python sandbox with two lines of SQL
During a recent web application pentest against an AI productivity platform, our team escaped the code-execution sandbox of one of its AI agents and read more than forty backend source files — including the...