threat-intel
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
Critical
Summary
A critical session isolation vulnerability, dubbed WriteOut, has been discovered in Writer, an AI platform, allowing attackers to steal session tokens and gain control of user accounts across multiple organizations. The flaw stems from a misconfiguration in the live preview feature, enabling attackers to hijack accounts simply by sharing a public preview link. Writer has since patched the vulnerability, but the incident highlights a significant risk for organizations utilizing the platform.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data