News for hackers. Stuff that matters.

A comment on How We Exploited CodeRabbit: From Simple PR to RCE and Write Access on 1M Repos. Parent comment

Re:How We Exploited CodeRabbit: From Simple PR to RCE and Wr... by morgante on Wednesday August 20, 2025 @02:10AM (#44959112)
The exploit is there either way.
[ Parent | on HN ]
Re:How We Exploited CodeRabbit: From Simple PR to RCE and Wr... by KingOfCoders on Wednesday August 20, 2025 @03:28AM (#44959552)
The exploit depends on changing the config to execute a .rb file. And the config was supplied by a PR.
[ Parent | on HN ]
Re:How We Exploited CodeRabbit: From Simple PR to RCE and Wr... by flexagoon on Wednesday August 20, 2025 @05:32AM (#44960257)
Yes, but the exploit grants you access to ALL repos, not just the one the PR is in. You could just as well change the config in your own private repo and run coderabbit in it.
[ Parent | on HN ]