Fortinet, SharePoint bugs exposed as Grok Build AI opens source

The article discusses three critical vulnerabilities detected, including two OS command injection vulnerabilities in Fortinet FortiSandbox and a deserialization vulnerability in Microsoft SharePoint. It also covers the recent release of the Grok Build AI tool as open-source software by SpaceXAI, allowing for community audits but restricting issues and pull request submissions.

The update addresses community backlash regarding data privacy by ensuring that data sharing is disabled by default and sensitive information is scrubbed before any uploads. However, the inability to report issues or contribute code raises concerns about the tool's collaborative potential.