Cybersecurity researchers have disclosed a critical security flaw in the Lightning AI Studio development platform that, if successfully exploited, could allow for remote code execution. The vulnerability, rated a CVSS score of 9.4, enables "attackers to potentially execute arbitrary commands with root privileges" by exploiting a hidden URL parameter, application security firm Noma said in a
source https://thehackernews.com/2025/01/lightning-ai-studio-vulnerability.html
Thursday, January 30, 2025
Lightning AI Studio Vulnerability Allowed RCE via Hidden URL Parameter
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box