Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I agree. The auth model is the real problem. Plex trusts anything from loopback, so any SSRF is effectively an auth bypass.
 help



Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: