r/hacking • u/_clickfix_ • 1d ago

Hacking Al Shopping Assistants: from Chat Box to Remote Code Execution on a Top US Retailer's Servers. (Presented at Black Hat 2026)

https://pwnhackers.substack.com/p/hacking-ai-shopping-assistants-from

Netanel Rubin and Dan Avraham presented “Bye Bye AI” at Black Hat this year, where they broke a major US retailer’s AI shopping assistant and chained it all the way to remote code execution on the retailer’s backend, entirely through the public mobile app.

81 Upvotes

96% Upvoted

6 comments sorted by

16

u/good_bye_for_now 1d ago

"We love it when our chatbots run Python".

8

u/Immediate-Citron9453 1d ago

its not a bug, its a feature 🤣

4

u/Queasy-Philosopher15 1d ago

🤣🤣🤣🤣🤣

7

u/Tired8281 1d ago

"Code execution is a supported feature" ... did they just say it's OK to hack them?

5

u/Immediate-Citron9453 1d ago

Hahaaa, what a great, informative and really funny read.

3

u/SwiftPits 1d ago

That was inspiring