Skip to main content

Home
Patch the
Planet (New)
Explore
Services
Company
Open
Source

Home
Explore
Prompt injection to RCE in AI agents

946 Publications
620 Audits
200+ Open-source repos
Since 2012

Disclosure Open Original ↗

Prompt injection to RCE in AI agents

Type

Disclosure

Client

Multiple

Date

2025

Domain

—

Effort

—

Section

—

View Advisory blog.trailofbits.com

Related

2025 Code integrity bypass in Electron applications Disclosure
2025 Weaponizing image scaling against production AI systems Disclosure
2025 Exploiting zero days in abandoned hardware Disclosure
2024 Pedersen DKG vulnerability disclosure Disclosure
2024 LeftoverLocals disclosure Disclosure
2023 Eth ABI DoS disclosure Disclosure

© 2026 Trail of Bits

Privacy Policy Vulnerability Disclosure

Services

Trail of Bits Services

Software Assurance Multi-disciplinary security reviews across the whole SDLC, with a team sized to your threat model rather than a fixed template.

AI/ML Security We review AI systems end to end, from training data and MLOps pipelines to model artifacts, inference hardware, and deployed agent loops.
Application Security Deep code, cloud, and architecture review that finds the root cause and the fix that retires the whole bug class.
Blockchain We review every layer of a blockchain system, from smart contracts to nodes and bridges, backed by Slither, Echidna, and Medusa.
Cryptography PhD-level cryptographers who build and break real protocols, from zero-knowledge proofs and MPC to post-quantum migrations.

Security Engineering An embedded team that builds custom security tooling and remediates vulnerabilities across your pipeline, from development through deployment. Research & Development Multi-year research that uncovers Internet-scale vulnerabilities and turns the findings into open-source tools, papers, and standards. Everything we do View all services

Get in touch

How can we help?

Contact Us Tell us about the software you need secured. Patch the Planet Apply to our open-source security initiative, in collaboration with OpenAI.

Other ways to reach us

Company

Who we are

About Who we are, what we believe, and how we got here.
Team The researchers and engineers behind the work.
Careers Open roles and what it's like to work here.

Explore the work

↵ to search all 1020

MCP Security

Securing the Model Context Protocol: the mcp-context-protector wrapper, disclosed attack classes, and community defenses.

AI/ML Security

Testing Handbook

Guides for configuring and automating static and dynamic analysis tools.

Application Security

ZKDocs

Interactive documentation on zero-knowledge proof systems.

Cryptography

Building Secure Smart Contracts

Best practices for developing secure smart contracts.

Blockchain

CTF Field Guide

Field guide to winning at Capture The Flag competitions.

Education

Ruby Security Field Guide

Practical Ruby security guide.

Application Security

Nothing here matches. Press ↵ to search the full library.

Trail of Bits

Security Review

Kiln Lagoon Vault Diff Review

Ethereum/EVM

2026-05

Kiln Lagoon Vault Diff Review

Blockchain

Trail of Bits

Security Review

Ripple Labs XRP Ledger Confidential Transfer

Cryptography Reviews

2026-04

Ripple Labs XRP Ledger Confidential Transfer

Crypto

Trail of Bits

Security Review

PyPI Warehouse

Technology Product Reviews

2026-04

PyPI Warehouse

Supply Chain

Trail of Bits

Security Review

Franklin Templeton BenjiSwap Differential Review

Ethereum/EVM

2026-04

Franklin Templeton BenjiSwap Differential Review

Blockchain

Trail of Bits

Security Review

Gensyn Buyback-and-Burn Vault

Ethereum/EVM

2026-04

Gensyn Buyback-and-Burn Vault

Blockchain

Trail of Bits

Security Review

Gensyn Bridged Token

Ethereum/EVM

2026-04

Gensyn Bridged Token

Blockchain

Trail of Bits

Security Review

Gensyn Delphi Dynamic Paramutuel Markets

Ethereum/EVM

2026-04

Gensyn Delphi Dynamic Paramutuel Markets

Blockchain

Trail of Bits

Security Review

Open Home Foundation SecureTar v3

Cryptography Reviews

2026-03

Open Home Foundation SecureTar v3

Crypto

Trail of Bits

Security Review

Anza BLS Signatures

Cryptography Reviews

2026-03

Anza BLS Signatures

Crypto

Nothing here matches. Press ↵ to search the full library.

2026 · Systems

Finding Hidden Overflows in Go: Fuzzing Beyond the Compiler's Limits

Kevin Valerio

2026 · AI/ML

How we made Trail of Bits AI-Native (so far)

Dan Guido

2025 · Systems

Buttercup: Autonomously Finding and Fixing Bugs at Scale in Open-Source Software

Ronald Eytchison

2025 · Systems

Buttercup: The Future of Trail of Bits' Solution to DARPA's AI Cyber Challenge

Trent Brunson

2025 · Systems

Buttercup and DARPA's AI Cyber Challenge, Ringzer0

Henrik Brodin, Ronald Eytchison

2025 · Systems

Our experience competing in the AI Cyber Challenge

Michael Brown et al.

2025 · Blockchain

Mutation Testing with Slither: A New Way to Find High-Severity Issues

Guillermo Larregay

2025 · Blockchain

Slither's Model Context Protocol: Giving LLMs Ground Truth from Static Analysis

Ben Samuels

Nothing here matches. Press ↵ to search the full library.

Skill let-fate-decide Let Fate Decide · 2026-05 Skill solana-vulnerability-scanner Building Secure Contracts · 2026-05 Skill c-review C Review · 2026-05 Skill audit-augmentation Trailmark · 2026-04 Skill devcontainer-setup Devcontainer Setup · 2026-04 Skill diagramming-code Trailmark · 2026-04 Skill differential-review Differential Review · 2026-04 Skill genotoxic Trailmark · 2026-04 Skill graph-evolution Trailmark · 2026-04 Skill sharp-edges Sharp Edges · 2026-04 Skill trailmark Trailmark · 2026-04 Skill trailmark-structural Trailmark · 2026-04 Skill trailmark-summary Trailmark · 2026-04 Skill agentic-actions-auditor Agentic Actions Auditor · 2026-04

Nothing here matches. Press ↵ to search the full library.

Browse all guides & handbooks →

Home Patch the Planet Explore Get in Touch

Services
Open Source
Company
Blog

Search

Esc

No results

Try different keywords, or browse everything in Explore.

Loading index…

↑ ↓ Navigate ↵ Open