BAC – Bypass chatbot restrictions via unauthorized mention injection
该报告还没有中文解读。
原文摘录
摘自原文（2323 字符中的一小部分）
Summary: - A member user who is not authorized to use the Gemini chatbot can still send and receive messages from this chatbot by manually editing the request and changing the and . This bypasses the permission control from the Admin side, leading to abuse of the chatbot beyond the scope of …
原文中的代码
- Similar to other chatbots, if disabled, members can still use it.
## Steps To Reproduce:
1. Login admin (████████)
2. Go to “Manage Agents”Verify. That the **Gemini agent is disabled** or not available
{F4285482}
3. Now go back to the member account (█████). we make a new chat . When chatting …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Dust 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @yoyomiski · 版权归作者与 Dust 所有