News
Vulnerability Disclosure: Higgsfield AI Vulnerability Disclosure Engagement
Publication date unknown · Discovered bugcrowd.com
Page published
Publication date unknown · First observed: 9 Nov 2026
Coverage timeline
Single-source advisory — one report is available.
Why it matters
Higgsfield’s inclusion of MCP in its disclosure scope gives researchers an authorized route to investigate access-control and tool-execution risks in agent-connected creative workflows.
Higgsfield’s Bugcrowd vulnerability disclosure program covers its generative-AI platforms and MCP service, which allows authorized agents to generate media and access account information and generation history. The program highlights API-key exposure, authorization bypasses, cross-account data access, and unauthorized model execution as testing priorities, but discloses no specific vulnerability.