Cybersecurity researchers have found an oblique immediate injection flaw in GitLab’s synthetic intelligence (AI) assistant Duo that might have allowed attackers to steal supply code and inject untrusted HTML into its responses, which might then be used to direct victims to malicious web sites.
GitLab Duo is a synthetic intelligence (AI)-powered coding assistant that permits customers to jot down,
GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden Prompts
