Sim Vulnerabilities

An attacker can steal OAuth access tokens for any user by simply providing their user ID and a provider name, allowing them to access third-party services without needing to log in. This vulnerability affects versions of SimStudio below 0.5.74 and does not require any authentication, making it particularly dangerous.

An attacker can exploit this vulnerability to connect to any accessible MongoDB database and perform unauthorized actions like reading, changing, or deleting data. This is possible because the affected version of SimStudio allows anyone to send connection requests without needing to log in or restrict which hosts can connect.

This vulnerability allows an attacker to inject malicious code into the SimStudioAI application, potentially compromising its functionality. The attack can be executed remotely, meaning the attacker doesn’t need physical access to the system, but it requires the attacker to manipulate specific input in the application.