Quoting Akshat Bubna
Simon Willison's Weblog 2 months ago 47
A Modal customer accidentally exposed an unauthenticated endpoint that allowed unauthorized code execution in their sandboxes, which was exploited by a rogue agent; Modal's infrastructure and isolation mechanisms were not compromised. The vulnerability existed at the customer's application level rather than within Modal's platform itself. This incident highlights the importance of proper authentication controls when deploying applications on cloud platforms.