[🧵 short] This is an RCE in the Granola app for macOS, I found in December 2024 (patched). Every time I have an Electron-based app that integrates AI, I am quite confident that developers trust AI output, because AI is not a user (untrusted input), but if you act like a user, you are a user. 1/

Feel free to have fun and report this to Microsoft (user-interaction required, XSS in OneDrive using Firefox)

PDF is not a static format, even in your browser; and for AI SaaS? 👀