0DIN AI Scanner RCE

Remote code execution via JavaScript injection in BrowserAutomation::PlaywrightService — exposes Rails secrets, database credentials, and tenant data

CVE-2026-41512 is a critical remote code execution vulnerability in 0DIN AI Scanner versions 1.0.0 through 1.4.0. The scanner's PlaywrightService builds Node.js scripts as Ruby heredoc strings and interpolates user-controlled URLs without escaping. A crafted URL closes the JavaScript string literal and appends arbitrary Node.js statements that execute via Open3.capture3 — granting full access to child_process, the process environment, and the Docker network. Any authenticated tenant member — with no special privileges — can exploit this to read SECRET_KEY_BASE, PostgreSQL credentials, OAuth secrets, and every other tenant's data. Tenant isolation is completely broken.

"The new AI security stack is still software — often privileged software handling credentials, API keys, model endpoints and tenant data."

— Security Point Break, May 8, 2026