Here’s how I got full admin rights in a Replit clone
12 hours ago
- Spaces, a free Replit clone by Hack Club, had a vulnerability in its code execution mechanism.
- The code was run directly in the Spaces Python process with only import filtering, not proper sandboxing.
- The attacker exploited this to dump environment variables (GitHub, Slack secrets, Groq API key).
- Then escalated to full admin access by modifying session data.
- The vulnerability was responsibly disclosed and fixed within 9 days by moving to Piston (Docker/Isolate).