Tag: workflow identity hijacking

AI Workflows Expose New Backdoor Vulnerability

Imagine a hidden vulnerability in AI workflows that lets malicious actors sneak in and access production systems without needing human credentials - a threat that's easy to overlook but hard to ignore. Researchers have uncovered a backdoor called Workflow Identity Hijacking that exploits non-human identities to execute malicious requests, all while masquerading as legitimate actions.