Copper Sun Brass Coders on Mythryl: “BrassCoders found command injection in 2 of 15 AI-generated files…”

BrassCoders found command injection in 2 of 15 AI-generated files: subprocess with shell=True on caller input, os.system with f-string paths. Both execute arbitrary commands on attacker input. https://brss.fyi/1alx

brss.fyi`shell=True` in AI Python: Command InjectionBrassCoders found command injection in 2 of 15 AI-generated files: run_command.py used subprocess with shell=True on a string argument, thumbnail.py used os.system with an f-string path.

16/10/26, 7:00 pm0 reposts0 likes

Post