RCE via Gemini Live AI Voice Session Misconfiguration. Injecting Client-Controlled Setup Frames Through Unconstrained Ephemeral TokensA growing number of products are building real-time AI voice features directly into their web applications. The most common pattern is a backend that holds the API credentials and a thin browser client that connects...