RCE through LLM frameworks (LangChain, Boxcars)
Date: 2023
Affected: LangChain, Boxcars.ai
Attack vector: prompt-injection
Category: vulnerability-disclosure
Severity: Critical

LLM frameworks like LangChain (Python) and Boxcars.ai (Ruby) offer apps and scripts that execute LLM-generated queries; carefully crafted prompts can yield remote code execution or SQL injection on the host.


Mitigations:

Architectural layers (MAESTRO):