AI-FILE

AIfile aifile은 공개적으로 문서화된 OpenAI Files API를 사용하여 기존의 HTTP/S 리스너 대신 jsonl 파일을 통해 임플란트 메시지를 교환하는 Mythic C2 프로파일입니다. 이는 OpenAI가 공개 문서에서 정의한 Files API 동작에 의존합니다: https://developers.openai.com/api/docs/guides/file-inputs?api-mode=responses. 리스너는 /v1/files 엔드포인트를 폴링하여 purpose=batch인 .jsonl 파일을 찾고, 각 요청...

CVE-2026-65700 h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API

h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthenticated remote attackers to read, write, and delete arbitrary files accessible to the server process by supplying traversal sequences in the bearer token. The getuserdir function in...

CVE-2026-65700 h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API

h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthenticated remote attackers to read, write, and delete arbitrary files accessible to the server process by supplying traversal sequences in the bearer token. The getuserdir function in...