How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Predicting MongoDB ObjectId() continuously in Rocket.Chat

calendar_today July 6, 2026 domain aikido-security

Aikido’s AI pentester found this file-access flaw in Rocket.Chat. A closer look at MongoDB’s ObjectId() showed the weak randomness that makes it exploitable. Category: Vulnerabilities & Threats

open_in_new Read original post