Security Breaches Found in AI-Powered Repair Tool Wondershare RepairIt

Trend Micro disclosed two critical flaws in Wondershare RepairIt that left user files, AI models, software binaries, container images, scripts, and source code in unencrypted cloud storage accessible via hardcoded, overly-permissive tokens; because RepairIt automatically pulls and executes AI models from that storage, attackers could swap or tamper with models to achieve arbitrary code execution and widespread supply-chain compromise, and the vendor had not responded to disclosure for five months—users are advised to stop using the product until fixed.