Familiar bugs in a popular open source framework for AI chatbots could give attackers dangerous powers in the cloud.