One Endpoint. Zero Credentials. Eight Confirmed Vulnerabilities.
tenzai.com | blog | #ai-security | #bug-bounty | #information-disclosure | #api-security | #authentication | #case-study | #oauth | #timing-attack | #tenzai | #ai-hacker
Summary
Tenzai's AI hacker documents eight confirmed vulnerabilities on a single OAuth token endpoint, from unmasked tech stack leakage to extracting client IDs character by character via response timing.
- Published
- Collected
Skip to content