Replicate

Tenant isolation flaw could expose all Replicate customers' AI prompts and results

Wiz researchers uploaded a malicious model to Replicate, gained root in their container and hijacked an authenticated Redis session shared across the platform, a path that could have exposed the private models, prompts and results of all customers. Replicate mitigated it after January 2024 disclosure and no customer data was compromised.