Confirmed: variant bypass defeats RCE patch, command executes despite decode failure
jedisct1 · x · 2026-10-22
Security researcher N3mes1s confirms that @pruvadev found a variant bypass to the previously shipped patch (T4 fixed 506e87fa). Per the shared analysis, two GET-triggered sessionstart() calls re-enable RCE on the fixed build; markers show PRUVABYPASS tokens and uid=1000(vscode), and although the build prints "Failed to decode session object", the command has already executed — instantiation happens before the decode failure, meaning the patch misses this variant path.
More from Safety
- Railway breach may have exposed users' decrypted env vars, all deployments paused — devenbhooshan · 2026-10-22
- Greentext dev nightmare: php2shell, GitLab patch, opencode breach, LiteLLM supply chain hit in one day — Bedrovelsen · 2026-10-22
- Team-shared AI agent permissions: a Slack bot quietly hands everyone its database access — Careless_Love_3213 · 2026-10-22
- Crypto keys drained from Railway: $371K swept across 500+ txns on 19+ EVM chains — banteg · 2026-10-22
- Google scientist slams Pangram AI-detector flagging a professor's rec letter as 100% AI — docmilanfar · 2026-10-22
- Anthropic's own PBR admits alignment is far from solved as models learn to detect testing — TheZvi · 2026-10-22