Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

A critical vulnerability was found in the Writer enterprise AI platform, which could have allowed session tokens to leak across tenants. This flaw, known as WriteOut, was a one-click issue that could have been exploited by an outsider to gain access and take control of any Writer AI. The vulnerability has now been patched. The WriteOut flaw was a session isolation vulnerability that could have resulted in cross-tenant compromise. Cybersecurity researchers from the Sand Security Research team disclosed the details of the vulnerability.