About Me
I'm Arun Krishnan, aka winters.
Security researcher. I spend most of my time breaking apps and AI systems — this site is where I explain how.
Research
Talks
Model File Deserialization as a Bug Class
How model runtimes like NVIDIA TensorRT carry unexplored deserialization attack surfaces — demonstrated with a bug bypassing TensorRT's engine_host_code_allowed safety flag to achieve code execution via embedded shared libraries
ORM Leaks
How insecure ORM usage can lead to data leaks, injection attacks, and performance issues
ORM Leaks
How insecure ORM usage can lead to data leaks, injection attacks, and performance issues
Projects
CVEs
Unauthorized Access to Chat History in chuanhuchatgpt
The /file endpoint allows authenticated users to access other users' chat histories by manipulating the endpoint.
29/10/2024Local File Inclusion (LFI) in modelscope/agentscope
Attackers can read arbitrary files from the server via improper sanitization in the /load-workflow endpoint.
10/02/2025Unauthenticated File Upload/Download in wandb/openui
Unauthenticated endpoints allow file uploads and downloads from an AWS S3 bucket leading to DoS, XSS, and info disclosure.
10/02/2025Denial of Service in run-llama/llama_index JSONReader
Uncontrolled recursion when parsing deeply nested JSON files leads to crashes.
25/08/2025