The Robot's Credentials: Attacking the AI Platform Behind the Device-Get Ticket
Details
The Robot's Credentials: Attacking the AI Platform Behind the Device
💫Grab your ticket and secure your spot:
Registration Link For Full Day Event
🦄 This is low cost and budget friendly and paid events.
Mikael Eriksson:
Consumer robots are arriving on our networks with something IoT devices typically don't have: a persistent cloud identity with write access to the owner's repositories, tied directly to an AI platform ecosystem. That changes what a compromise actually meant.
During my research into one of the consumer-accessible robots on the market, I found four attack paths. Two are what you'd expect from a device on a local network. Unauthenticated RCE, a desktop proxy deliberately designed to bypass browser Private Network Access restrictions. The vendor patched those. When I went through that patch, I found the other two were already there untouched by the security release, and in one case made newly relevant by the patch itself.
A malicious HuggingFace Space with a build hook exfiltrates the robot's stored OAuth token before the install even completes. A second unauthenticated endpoint replaces the stored token entirely in three HTTP requests. The robot's cloud identity is now the attacker's, persistent across reboots, and the victim's HuggingFace repositories are exposed alongside the robot itself.
The techniques are familiar. The composition is new: local daemon, desktop proxy, package build pipeline, cloud relay, stored OAuth token, and repository permissions are all part of one control plane. A breach here is not contained to the device.
Attendees leave able to evaluate any cloud-connected robot on their network and the risk they introduce.
The token replacement is not the end state. An attacker with the robot's cloud identity can substitute the model it runs. Silent and persistent across reboots, the compromise survives the attacker's exit. The device continues functioning normally, except what it thinks is no longer the users model.
💫Grab your ticket and secure your spot:
Registration Link For Full Day Event
Registration Link For Full Day Event
This is low cost and budget friendly events.