PromptArmor IBM Bob Malware Execution via Prompt Injection
Date: 2026-01
Affected: IBM Bob
Attack vector: rce
Category: research
Severity: Critical

PromptArmor evaluated IBM's Bob AI development partner and found it vulnerable to prompt injection via malicious README.md that triggers echo command exploitation enabling malware install/execution. IDE also has zero-click markdown image exfil.


Mitigations:

Architectural layers (MAESTRO):