Urgent: zhipu ai vulnerabilities disclosure

[Deepak-Sharma755]

Dear @zRzRzRzRzRzRzR I recently submit a bug report to zai official mails, but I didn't get any reply, no acknowledgement of receiving mail.

Report disclose very severe vulnerabilities about your internal infrastructure,secrets etc Neither vulnerabilities get fixed nor acknowledge.

My mail : niketanrao6265@gmail.com

I have leads, I can disclose very severe vulnerabilities in future so please lable or add to favorite my mail so we can disclose fast, fix fast

Thanks I am waiting for your reply

[zRzRzRzRzRzRzR]

Could you let me know which email address you sent it to?

[Deepak-Sharma755]

Thanks for bringing your attention to this matter

rong.chen@z.ai
service@zhipuai.cn
yuxuan.zhang@z.ai

rong gave me new mail to submit vulnerabilities
vuln_report@zhipuai.cn

I submitted to all mails collectively but didn't get any reply

I also have big leads that could reveal more critical vulnerabilities in future, so tell them to add my mail in favourite or important

[zRzRzRzRzRzRzR]

We've received your email. It will take some time to process, and we'll get back to you once there's an update.

[Deepak-Sharma755]

Thanks brother, also tell them to lable my mail as important or favorite

[Deepak-Sharma755]

@zRzRzRzRzRzRzR any update brother

[zRzRzRzRzRzRzR]

No, if there are any updates, my colleague should reply via email.

[Deepak-Sharma755]

Actually vulnerabilities are really severe anyone reach to zai backend easily and take over it. So we need to go through fast channel to fix them before anything goes wrong.

Tell your buddy to priotize my mail and review the report that I sent

[Deepak-Sharma755]

https://docs.google.com/document/d/10n8XK6rv6BWuNsgkPply6dlgp6iBhItb/edit?usp=drivesdk&ouid=105220086633570788524&rtpof=true&sd=true

[Deepak-Sharma755]

@zRzRzRzRzRzRzR noone is replying, I sent you report please review it once, also file have allowed only permission so others can see it if I didn't allowed so it's secure disclosure

[zRzRzRzRzRzRzR]

We will get back to you tomorrow — I've learned that my colleague has just finished handling it.