LLMSmith: RCE Vulnerabilities in LLM-Integrated Applications
Date: 2025-02-27
Affected: LLM Integration Frameworks
Attack vector: adversarial-input
Category: research
Severity: Critical

Researchers identified 20 remote code execution (RCE) vulnerabilities across 11 different LLM frameworks. They discovered applications deployed on the public internet built using these LLM frameworks and demonstrated the RCE vulnerabilities could be exploited using prompt injection. The 11 LLM frameworks the researchers evaluated were: LangChain, LlamaIndex, Pandas-ai, Langflow, Pandas-llm, Auto-GPT, Griptape, Lagent, MetaGPT, vanna, and langroid.


Mitigations:

Architectural layers (MAESTRO):