Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single sign-on (SSO) endpoint; an Insecure Direct Object Reference (IDOR) vulnerability that exposes cross-user workflow data; and prior to version 2.5.0, authenticated attackers could perform cross-user LLM credential abuse and data disclosure due to missing service-layer access checks.
VU#166125: Bisheng has authentication bypass vulnerabilities
About this summary. This is a short, independently written summary of an article first published by CERT/CC. Cyber Security News did not report or verify the underlying story. Read the original: https://kb.cert.org/vuls/id/166125
Source attribution: headline and facts are from CERT/CC (kb.cert.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Containing the Autonomous Operator: A Defense-in-Depth Framework and Reference Architecture for Securing AI Agents on Kubernetes
arXiv:2610.02861v1 Announce Type: new Abstract: Large language model (LLM) agents are moving from chat interfaces into infrastructure operations, where they read…
JadePuffer crims hijacked Azure identities and used them to blow up cloud resources
The cyber criminal behind JadePuffer, the first known agentic ransomware infection reported over the summer, has also used stolen Azure identities to conduct destructive…
Secrets That Survive Everything: Runtime Credential Exposure in Production Web Applications
arXiv:2609.23042v1 Announce Type: new Abstract: Pre-deployment secret scanning operates only on source code, never on what a production application serves. We document…
AI-generated changes create review bottlenecks in software delivery
83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD…
CyberArena: Benchmarking AI Agents in Live Symmetric Attack-and-Defense Combat
arXiv:2610.19005v1 Announce Type: new Abstract: AI agents are demonstrating increasingly strong offensive and defensive cybersecurity capabilities in the real world…
What You Sign Is Not What You Run: The Verifiability Gap in Quantized LLM Supply Chains
arXiv:2610.19498v1 Announce Type: new Abstract: Model signing authenticates the full-precision weights W an LLM is released with, yet users run a quantized artifact Q…