AI Shopping Assistant Flaws Let Attackers Execute Code on Retailer’s Backend Servers
Brief
A newly disclosed report shows how security flaws in an unnamed major US retailer’s AI shopping assistant could be chained from a public mobile app to remote code execution on backend infrastructure.
The attack reportedly bypassed multiple protections designed to keep the assistant confined to shopping-related tasks. Rein Security co-founder and CTO Netanel Rubin and researcher Dan Avraham presented the research, titled “Bye Bye AI,” at Black Hat.
Their work shows how an AI assistant can serve as a path into enterprise systems when input validation, runtime controls, and application-layer security are applied inconsistently.
AI Shopping Assistant Flaws
The pair began by fingerprinting five retail assistants: Kroger, Instacart, Amazon Alexa, Walmart Sparky, and Albertsons.
Two questions whether the services sold avocados and the unrelated Spanish greeting “¿Cómo estás?”