Trail of Bits: Prompt Injection to RCE in AI Agents
Date: 2025-10
Affected: Trail of Bits: Prompt Injection to RCE in AI Agents
Attack vector: prompt-injection
Category: real-world
Severity: Medium

Demonstrated a general attack pattern across multiple AI agent platforms: bypassing human approval protections via argument injection in pre-approved commands (e.g. `go test -exec` flag). The same malicious prompts work when embedded in code comments, rule files, GitHub repos, and logging output.


Mitigations:

Architectural layers (MAESTRO):