You Had Me at "Hello": A Chinese‑Language Framework Targeting AI Infrastructure

Era's researchers documented "Greeter," a Chinese-language exploitation framework that abused CVE-2024-58351, an overrideConfig code-injection flaw in the open-source Flowise AI platform. Over July to October 2026, seven honeypots logged attacks that hid malicious commands inside repeated "hello" chat messages, exposing cloud credentials and host data.