Skip to content
Finding eight high-severity vulnerabilities in NodeBB in six hours
aikido.dev | research | #ai-security | #featured | #vulnerability-research | #access-control | #activitypub | #nodebb | #xss | #template-injection | #ai-pentesting | #authorization-bypass
Summary
Aikido’s AI-assisted white-box assessment found eight high-severity flaws in NodeBB in six hours, including multiple XSS and authorization-bypass issues across its ActivityPub implementation; fixes landed in NodeBB 4.14.0.
Why it matters
Eight default-instance flaws found in six hours, including XSS and authorization bypasses, provide a concrete view of both AI-assisted audit speed and ActivityPub attack-surface risk.
- Published
- Collected