Executive brief
Tencent AI-Infra-Guard is a tool used for managing AI infrastructure and tasks. A security flaw in the task management component allows unauthorized individuals to view sensitive information, specifically plaintext API tokens for AI models like GPT-4. This could lead to the theft of expensive API credits, unauthorized use of AI services, and potential financial loss for the organization.
Technical details
A vulnerability exists in the Task Detail API endpoint (/api/v1/app/tasks/{sessionId}) of Tencent AI-Infra-Guard 4.0 due to missing data masking and improper authentication. The root cause is located in common/websocket/task_manager.go, where the GetTaskDetail function returns the session.Params field—containing raw API tokens—without invoking masking functions. Additionally, the setupIdentityMiddleware in common/websocket/server.go fails to perform cryptographic verification, blindly trusting HTTP headers. An unauthenticated remote attacker can exploit this by guessing or obtaining a session ID to retrieve another user's plaintext AI model credentials. As of the advisory date, no patch has been released by the vendor.
Affected products
- Tencent AI-Infra-Guard 4.0
Timeline
- 2026-03-20: disclosed: Public disclosure via GitHub Gist PoC
- 2026-04-05: advisory: Vulnerability published by VulDB/NVD