search
Ctrlk
x-twittergithub
rssRSS feed

RSS feed

hashtag
Executing AI agent on behalf another user in LangSmith Agent Builder (Resolved)

This post examines the agent's underlying architecture and the chain of vulnerabilities that led to user impersonation during agent execution.

hashtag
Chaining service key leakage and path confusion in LangSmith (Resolved)

This post describes the discovery and exploitation of a vulnerability that allowed unauthorised access across LangSmith agent deployments. In addition, it details research into path normalisation differences between Nginx and GCP Load Balancer.

hashtag
Achieving remote code execution in LangSmith Playground using unsafe template formatting

This post details the discovery and exploitation of a vulnerability in LangSmith Playground that allowed arbitrary code execution through unsafe template formatting.

NextExecuting AI agent on behalf another user in LangSmith Agent Builder (Resolved)

Last updated