ChatGPT-based agents enable RCE/SQLi via polite prompting
Date: 2023
Affected: LangChain, Boxcars.ai
Attack vector: prompt-injection
Category: vulnerability-disclosure
Severity: Critical

Frameworks such as LangChain and Boxcars.ai directly execute LLM-generated code/SQL, making it trivial to perform remote code execution or SQL injection through carefully worded prompts.


Mitigations:

Architectural layers (MAESTRO):