🚨 CYBER SECURITY PSA 🚨
there is a known exploit in activitypub, the underlying protocol that runs the fediverse, which enables remote code execution.
a recent proof of concept has shown that if one were to create a post, such as this one, there is a chance it will be displayed on an end user's device.
stay safe everyone ❤️
ari :ariYeah:
npub1j3…7dxsq
2026-08-17 09:02:51 UTC
Author Public Key
npub1j3x54dyr5p9v66kcmqd62xwkyxplhlwau570ncsl6x7pjhl9wmhqt7dxsqSeen on
wss://relay.momostr.pinkPublished at
2026-08-17 09:02:51 UTCEvent JSON
{
"id": "59aa35f359b6d584f9c2ae3b636ca9cf5885111fca109fc71385849a96ab1dce",
"pubkey": "944d4ab483a04acd6ad8d81ba519d62183fbfddde53cf9e21fd1bc195fe576ee",
"created_at": 1786957371,
"kind": 1,
"tags": [
[
"proxy",
"https://fedi.arimelody.space/notes/aq0klddqvzks3mcr",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fedi.arimelody.space/notes/aq0klddqvzks3mcr",
"pink.momostr"
],
[
"-"
]
],
"content": "🚨 CYBER SECURITY PSA 🚨\n\nthere is a known exploit in activitypub, the underlying protocol that runs the fediverse, which enables remote code execution.\n\na recent proof of concept has shown that if one were to create a post, such as this one, there is a chance it will be displayed on an end user's device.\n\nstay safe everyone ❤️",
"sig": "47b018a0c943668093e69d38da7ff92c1dcbf60f048b5919a1d5736cdec1b4c6c6cfa530a6c8911c5fded5b6511250907c49f5fbd62b31bbcf34443b75916b73"
}