Devin AI Exposes Ports to the Internet via Prompt Injection
Date: 2025-08
Affected: Cognition Devin
Attack vector: tool-abuse
Category: research
Severity: Critical

Cognition Devin AI exposed development ports to the internet through prompt injection, leaking tokens. Reported April 6, 2025 with no vendor response.


Mitigations:

Architectural layers (MAESTRO):