Wiz finds Replicate tenant-isolation flaw enabling cross-tenant model & data access
Date: 2024-05
Affected: Replicate
Attack vector: rce
Category: real-world
Severity: Critical

Wiz researchers uploaded a rogue Cog container to Replicate to gain RCE and abused a centralized Redis queue to mount cross-tenant attacks on customer models, prompts and results. Responsibly disclosed January 2024; remediated by Replicate.


Mitigations:

Architectural layers (MAESTRO):