Shared network vulnerability disclosure

What this post added

This post details a security vulnerability where model containers could access sensitive data by eavesdropping on internal network traffic due to shared network namespaces and unencrypted communications between model processes and their 'director' services. Replicate responded by encrypting all internal traffic with TLS and removing raw network access capabilities (NET_ADMIN, NET_RAW) from model containers, effectively mitigating the vulnerability. No evidence of exploitation was found.