Sometimes the most interesting connections are the unexpected ones. @Oranav and @vbCrLf showed how PostgreSQL internals can play a role in exploiting AI orchestration zero-days.
Over the last few months, I researched Langflow, n8n, and Activepieces.
The result is 9 zero-days and a BlueHat IL talk 🛠️
🚨 CVE-2026-7524 (Critical - 9.8)
🚨 CVE-2026-48519 (Critical - 9.6)
⚠️ CVE-2026-7528 (High - 7.1)
🐛 CVE-2026-42228 (Moderate - 6.3)
🐛 CVE-2026-48520 (Moderate - 6.1)
🚨 CVE-not-yet-published (Critical - 9.0)
🚨 CVE-not-yet-published (Critical - 10.0)
⚠️ CVE-not-yet-published (High - 8.6)
⚠️ CVE-not-yet-published (High - 8.3)
Thanks to the vendors for the cooperation and fixes.
@Oranav and I will be breaking down some of these on stage at BlueHat IL 2026
Registration closes soon. Write-ups will be published after the con.
Abstract:
microsoftrnd.co.il/bluehatil/conf…@BlueHatIL@msftsecresponse
Excited to share my research was accepted at @BlackHatEvents USA 2026! 🎩
I'll present how I achieved interactive access to users' AI assistants by chaining:
🔓 Prompt injection
🔓 Privilege escalation
🔓 Path traversal
🔓 `.toml` injection
🔓 and finally an `LD_PRELOAD` exploit
The impact:
🚨 CVE-2026-32193 (Critical)
🏆 $48,000 bug bounty from Microsoft
ChatMate: Remote Prompt Execution on AI Assistants through Sandbox Escaping
blackhat.com/us-26/briefing…
Special thanks to @msftsecresponse for the brilliant collaboration!
See you in Vegas 👋
#ChatMate#CVE_2026_32193#BHUSA@BlackHatEvents@rubrikInc@Oranav
3K Followers 466 FollowingInterested in infosec, especially in Windows Internals 💙 Reverse Engineering 💚 and CTFs ❤ (oh and did I mention Windows Internals already? 😉)
16 Followers 195 FollowingJailbreaking, hacking, reverse engineering, motor sports, pool, pc repair, technology, space, engineering, pig farmer, general nice bloke altho speak my mind!
7K Followers 6K FollowingHacking and security documentation: slides, papers, video and audio recordings. All high-quality, daily updated. Spreading hacking knowledge, for free, enjoy!
62K Followers 291 FollowingA kiwi coding mimikatz & kekeo
github: https://t.co/eS3LVgU6i0
Head of security services @banquedefrance
Tweets are my own and not the views of my employer
446K Followers 6K FollowingChief Scientist, Google DeepMind & Google Research. Gemini Lead. Opinions stated here are my own, not those of Google. TensorFlow, MapReduce, Bigtable, ...
145K Followers 214 FollowingWe are the Microsoft Security Response Center. To report security vulnerabilities or abuse in Microsoft products, visit https://t.co/kxEbdfMny1.
344K Followers 320 FollowingBe first to know about AI, threats, and new tools. Quick hits, expert tips, and real-time security news—follow for smarter, safer ops.
44K Followers 1K FollowingRubrik (NYSE: RBRK), the Security and AI company, operates at the intersection of data protection, cyber resilience and enterprise AI acceleration.
5K Followers 94 FollowingHexagate prevents exploits, hacks, and risks for protocols, chains, exchanges and asset managers.
Acq. by Chainalysis.
Get access today:
https://t.co/n9UkoC25wH
48K Followers 336 FollowingAdventures from the technological fringe.
Join my newsletter to receive wonderful tidbits I find along my journey - https://t.co/94gknrtkbc
49K Followers 336 FollowingSecurity researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc. Mastodon: @[email protected]
3K Followers 14 FollowingSPURDO COIN REEDY TO RISE LIKE NO TOMORRO! SPURDO IS DA TRU OG MEME AND FINALLY REEDY TO SHAKE DE SPACE! https://t.co/BdmV888JdS
47K Followers 2K FollowingChief Technical Innovation Officer @crowdstrike. Windows Internals author and trainer. He/Him. RTs are not endorsements, opinions are my own.