Leoma Patches External Egress Exploit in Chute
Share
A misconfigured chute allowed unauthorized outbound external API calls due to enabled external egress settings. The team disabled external egress for the affected chute and deployed a patch. Future controls will restrict custom chute images and configurations to approved inference pipelines.
- •Chute ID d5fa79dd-6556-55cb-8335-4c51b2ad69cf allowed external API calls via misconfiguration
- •Custom chute image and config limited visibility into runtime behavior
- •External egress forcibly disabled; patch deployed to chutes-api
- •New controls planned for custom configurations and unapproved images
Distilled from 3 team messages in the official Bittensor Discord. Generated by Claude Haiku 4.5.