Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

A critical session isolation vulnerability, dubbed WriteOut, has been discovered in Writer, an AI platform, allowing attackers to steal session tokens and gain control of user accounts across multiple organizations. The flaw stems from a misconfiguration in the live preview feature, enabling attackers to hijack account…