2026-09-30 03:41 UTC
Go hack some AI SOC shit.
https://github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7
Three functions in services/actions build CrowdStrike Real-Time Response (RTR) command strings by string interpolation, with no escaping, from caller-supplied parameters. The resulting command string is sent to the CrowdStrike Falcon agent and executed on the target endpoint as the EDR agent's privilege (SYSTEM/root).
Replies (1)
-
@huronbikes@cyberplace.social 2026-09-30 11:27
@cR0w@infosec.exchange oh cool, it's 2026 and we're still not validating and sanitizing user input. In a security product.