This is serious because it is not a chatbot making up a story. A stateless “hi” with tools: [] still came back finish_reason: tool_calls and executed read_file/grep on another user’s workspace. That means session isolation failed at the serving layer: one tenant’s context was reachable from another. If that happens, a prompt as empty as “hi” can pull someone else’s files, tools, and private session. Closing it as a hallucination, then deprecating the model, does not prove the mix-up cannot happen on whatever replaced it. submitted by /u/Desperate-Ad117
Originally posted by u/Desperate-Ad117 on r/ArtificialInteligence
You must log in or # to comment.