RCE in MathGPT via prompt injection (Streamlit demo)
Date: 2023
Affected: MathGPT (Streamlit demo, GPT-3 backed)
Attack vector: prompt-injection
Category: vulnerability-disclosure
Severity: Critical

The publicly available Streamlit application MathGPT used GPT-3 to convert natural-language questions into Python code that was then executed; prompt injection allowed an attacker to achieve remote code execution on the host.


Mitigations:

Architectural layers (MAESTRO):