WF-8BIVJK
Researchers trick Baidu-Unit chatbot into leaking server data
Researchers from the University of Sheffield demonstrated that the AI chatbot Baidu-Unit could be manipulated to produce malicious code. Using this code, they obtained confidential server configurations and tampered with a server node. Baidu acknowledged the vulnerabilities, fixed them, and financially rewarded the researchers.
- Organisation involved
- Baidu
- Product, system or model
- Baidu-Unit
Where this came from
Attribution
This incident was imported from standard.co.uk. Our additions to it — the structured fields, the translation, the checks against other reports — are published under the same licence.
This is a record of what was reported, not a finding that anyone broke the law. If it names your organisation and you believe it is wrong, the corrections process is free and open to everyone.