pickle.load

• Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

  Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post Pickle in the Middle – Hijacking Vertex AI Model Uplo

• From SQLi to RCE – Exploiting LangGraph’s Checkpointer

  From SQLi to RCE – Exploiting LangGraph’s Checkpointer By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers – persistence layers that store execution state. But what happens when that persistence layer isn’t locked down? K

All reports →