Rated 9.8 out of 10 in severity, the flaw could allow a remote attacker to gain unauthorized access to applications.
The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote ...