Mitigating a token-length side-channel attack in our AI products

The Workers AI and AI Gateway team recently collaborated closely with security researchers at Ben Gurion University regarding a report submitted through our Public Bug Bounty program. Through this process, we discovered and fully patched a vulnerability affecting all LLM providers. Here’s the story

ai gateway attack ben ben gurion bounty bug bug bounty bug bounty program channel developer platform gateway length llm process products program public report researchers sase security security researchers side-channel side-channel attack story team token university vulnerabilities vulnerability workers workers ai