News for hackers. Stuff that matters.

A comment on How We Exploited CodeRabbit: From Simple PR to RCE and Write Access on 1M Repos. Parent comment

Re:How We Exploited CodeRabbit: From Simple PR to RCE and Wr... by musicnarcoman on Tuesday August 19, 2025 @03:28PM (#44955337)
So the CodeRabbit application with access to application secrets still runs in the same virtual machine as untrusted code from the outside?
[ Parent | on HN ]

There are no comments on this comment yet.