Abhishek(@aacle_):🤖 AI agent → finds bug 🎯 Bug → Cross-org IDOR 🛠️ Sentry → fixed it ❌ Sentry → said no CVE needed 👀 GitHub → assigned one anyway The endpoint: /organizations/yourorg/issues/{group_id}/events/latest/json/ Root cause: group_id → loaded directly org check → missing Change the ID. Keep the slug. Read another organization's events. That's the entire bug.

Abhishek

@aacle_

Building @Vulncure ⚡| Helping founders fix vulnerabilities before hackers find them. Talk to me about: Bug Bounties, LLM Security & React.

Joined June 2017

292 Following 49.3K Followers

Abhishek@aacle_

2026.09.22 16:23

🤖 AI agent → finds bug 🎯 Bug → Cross-org IDOR 🛠️ Sentry → fixed it ❌ Sentry → said no CVE needed 👀 GitHub → assigned one anyway The endpoint: /organizations/yourorg/issues/{group_id}/events/latest/json/ Root cause: group_id → loaded directly org check → missing Change the ID. Keep the slug. Read another organization's events. That's the entire bug.