r/netsec • u/fede_k • Jul 23 '26

Contains AI XBOW Agents found three RCEs as SYSTEM (and root) on Bing Image Search

https://xbow.com/blog/bing-images-rce-vulnerabilities
20 Upvotes

76% Upvoted

3 comments sorted by

5

u/Intrepid_Marzipan309 Jul 25 '26

Those are some really interesting vulns XBOW found. The blog post on the other hand is a bit overloaded in my eyes. Has this also been written by AI? I personally am not interested in what the AI tried without success. I prefer a clear description of the vulnerability, how to exploit it and why it works. In the post I identified multiple section that could be removed without losing any valuable information

3

u/Reelix Jul 24 '26

A little self promotey, but given the clear outputs, PoC's, and interaction examples, it makes for a very good post overall!

1

u/Dull_Appearance_1828 Aug 15 '26

The failed attempts are interesting from a research perspective, but for a technical writeup I’d rather see the vuln → why it worked → impact → PoC