Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Kenn White (kennwhite@mastodon.social)'s status on Thursday, 18-Apr-2024 21:32:34 JST Kenn White

   Incredible research at BlackHat Asia today by Tong Liu and team from the Institute of Information Engineering, Chinese Academy of Sciences (在iie.ac.cn 的电子邮件经过验证)

   A dozen+ RCEs on popular LLM framework libraries like LangChain and LlamaIndex - used in lots of chat-assisted apps including GitHub. These guys got a reverse shell in two prompts, and even managed to exploit SetUID for full root on the underlying VM!