Breaking

Writer AI Patches Session Isolation Flaw in Its Platform

July 7, 2026 at 09:28 EDT

Security
Sales & Business

Writer AI, which builds an enterprise AI platform, has patched a session isolation bug dubbed "WriteOut" in its public preview link sharing feature.

Enterprise AI Security · Patched

One Click Could Have Hijacked Your Session

Writer has fixed a session-isolation flaw in its "WriteOut" preview feature. A single click on a public preview link could forward a logged-in user's session cookie into an attacker-controlled sandbox — where it could be captured and replayed.

1 click

All it took to trigger — following one malicious preview link.

Multi-tenant

A proxy operated across tenant boundaries that must stay isolated.

Patched

Fix already applied — scope and exploitation await disclosure.

How the cookie leaked

1 · Victim clicks link

Logged-in user follows a public WriteOut preview link.

→

2 · Proxy crosses tenants

Session cookie flows into the attacker's sandbox.

→

3 · Capture & replay

Attacker replays the cookie to hijack authenticated state.

Why it matters

A stolen session cookie in an enterprise AI tool can be the starting point for account takeover or data leakage.

Finance Healthcare Retail Technology Regulated customers

Preview and sandbox features in multi-tenant environments are a frequent target — a lapse in session management draws attention for a vendor that promotes ISO certifications and a public Trust Center as selling points.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.