Mahmoud Elkhaligy

A prompt injection issue allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Prompt injection is a technique where specially crafted inputs are used to manipulate the behavior of a large language model to execute unintended actions.

An attacker can create a malicious application and connect it to a target user's custom domain. By editing the authentication configuration, the attacker can reroute traffic to the application they control. If the victim uses an OAuth provider, the attacker's workspace is populated with the victim's OAuth Client ID and Client Secret.

An authenticated attacker can inject JavaScript through the scripts and styles option of the sign-in page. The injected script executes within the domain context of any user who visits the page.