A vulnerability in the Streamlit app deployment framework can allow attackers to hijack underlying cloud servers.
Attackers can exploit a file upload vulnerability to rewrite server files and deploy new SSH configurations.
Cato CTRL™ Threat Research: New Streamlit Vulnerability Enables Cloud Account Takeover Attack and Stock Market Dashboard Tampering
Cato CTRL found a Streamlit flaw allowing attackers to bypass file checks, take over cloud instances, and access or alter stock data.
Cato Networks (www.catonetworks.com)
