InsideLLM Function Calling: The Model Isn't Your Auth Check
LLM function calling breaks in three separate places. I typed I am an administrator and ran whoami. The handler, the function list and the functions themselves.
3 write-ups tagged Insecure Output Handling. Browse all tags or the full blog.
LLM function calling breaks in three separate places. I typed I am an administrator and ran whoami. The handler, the function list and the functions themselves.
Insecure output handling mitigations, layer by layer. Every LLM attack in this track dies to a control invented before LLMs, and the sandbox moves least.
Insecure output handling in LLM apps: the model refused my XSS payload and the page still fired an alert. Reflected and stored LLM XSS, from a real lab run.