Critical Flaw in Replicate AI Platform Exposes Proprietary Data

Wiz researchers found a critical vulnerability in Replicate's AI-as-a-service platform where a malicious Cog-format container could achieve root-level remote code execution, move laterally within a Kubernetes cluster, and perform cross-tenant queries or modify other customers' models and outputs; the issue risked exposing proprietary model data and sensitive prompts, was responsibly disclosed to Replicate in January 2023, and has been mitigated.