LLMs could control their host machines by exploiting inference engines

Re:LLMs could control their host machines by exploiting infe... by hobofan on Wednesday August 26, 2026 @09:22AM (#49448708)

I'm not saying that the HTTP interface is not an attack surface, but that securing that attack surface (as one may assume in a simple security model) is not enough to protect against that class of attacks, as no level of introspecting the input will help predict and secure against malicous output.

[ Parent | on HN ]

Re:LLMs could control their host machines by exploiting infe... by angry_octet on Wednesday August 26, 2026 @06:57PM (#49457063)

This is misunderstanding the attack. The potentially malicious output tokens are processed entirely by classical text processing techniques, i.e. parsing, in order to enable tool calling on the client and via MCP servers. Garden variety vulnerabilities can occur on the inference server, but are amenable to modest levels of software engineering competency.

Basically, it's a regex, don't fuck it up.

[ Parent | on HN ]