Security Research

0day Hunting the Day After xAI Open-Sourced grok-build (Part 4): ptyctl Test Server's Zero-Auth CORS and Cross-Origin RCE

Thinking 2026-07-20 6 min read Research Dossier
#AI Security#Web Security#Vulnerability Analysis#Persistence
On a near-black teal-blue background, a stream of commands pierces the localhost boundary from a remote web origin into a local terminal panel; nearby, a memory directory is being inscribed with malicious instructions that hijack an AI silhouette's decision-making; a hidden WebSocket tether silently siphons terminal output; in the foreground a checkpoint guard inspects a forged badge — copper-orange accents throughout, symbolizing the ptyctl test server's zero-auth CORS and cross-origin RCE chain
Unlock to view this content.