importantSYS.SOURCE: The Hacker News• 2026-07-07T18:57:09+05:30

Writer AI Session Isolation Flaw Allows Cross-Tenant Session Token Leakage

#Session Hijacking#Tenant Isolation#AI Security#Vulnerability#Cross-Tenant Compromise

A critical session isolation vulnerability, codenamed WriteOut, in the Writer AI platform allows an attacker to hijack session tokens from one tenant and access private data across entirely separate enterprise accounts. This flaw undermines tenant isolation and the shared responsibility model by allowing agents to collect and exfiltrate sensitive session information from different companies.

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in cross-tenant compromise.

The one-click vulnerability has been codenamed WriteOut by the Sand Security Research team.

"An outsider could go from having no access to taking over any Writer AI

Read original article

*** END OF TRANSMISSION ***

> DISCOVERY OF -YEAR-OLD LINUX KERNEL FLAW (CVE--) ALLOWS ROOT AND CONTAINER ESCAPE > CISA UPDATES KEV CATALOG WITH FOUR ACTIVELY EXPLOITED VULNERABILITIES IN ADOBE, JOOMLA, AND LANGFLOW > EXPLOITING PROMPT INJECTION IN GITHUB AGENTIC WORKFLOWS TO ACCESS PRIVATE REPOSITORIES > OPENAI ANNOUNCES PUBLIC LAUNCH OF GPT-. SOL, TERRA, AND LUNA THIS THURSDAY > IMPLEMENTING A MINIMAL ZFS NAS USING DEBIAN AND SAMBA WITHOUT COMMERCIAL NAS SOLUTIONS > GUIDE TO IMAGING AND PRESERVING 8-INCH, 5.25-INCH, 3.5-INCH, AND 3-INCH FLOPPY DISKS > ANALYSIS OF THE ACCURACY AND RELIABILITY OF THE ECONOMIST'S ECONOMIC REPORTING > OFFICIAL LINEAGEOS PROJECT STATISTICS AND METRICS > CHIPTUNE RADIO: CONTINUOUS STREAM OF 8-BIT AND TRACKER MUSIC > THE MATHEMATICAL BASIS AND APPLICATIONS OF BENFORD'S LAW IN REAL-WORLD DATASETS> DISCOVERY OF -YEAR-OLD LINUX KERNEL FLAW (CVE--) ALLOWS ROOT AND CONTAINER ESCAPE > CISA UPDATES KEV CATALOG WITH FOUR ACTIVELY EXPLOITED VULNERABILITIES IN ADOBE, JOOMLA, AND LANGFLOW > EXPLOITING PROMPT INJECTION IN GITHUB AGENTIC WORKFLOWS TO ACCESS PRIVATE REPOSITORIES > OPENAI ANNOUNCES PUBLIC LAUNCH OF GPT-. SOL, TERRA, AND LUNA THIS THURSDAY > IMPLEMENTING A MINIMAL ZFS NAS USING DEBIAN AND SAMBA WITHOUT COMMERCIAL NAS SOLUTIONS > GUIDE TO IMAGING AND PRESERVING 8-INCH, 5.25-INCH, 3.5-INCH, AND 3-INCH FLOPPY DISKS > ANALYSIS OF THE ACCURACY AND RELIABILITY OF THE ECONOMIST'S ECONOMIC REPORTING > OFFICIAL LINEAGEOS PROJECT STATISTICS AND METRICS > CHIPTUNE RADIO: CONTINUOUS STREAM OF 8-BIT AND TRACKER MUSIC > THE MATHEMATICAL BASIS AND APPLICATIONS OF BENFORD'S LAW IN REAL-WORLD DATASETS