Research
Demystifying RCE Vulnerabilities in LLM-Integrated Apps | Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security
Publication date not yet evaluated · Added acm.org
Page published
Coverage timeline
Single-source research — one report is available.
Why it matters
LLM-integrated frameworks that expose code-execution utilities can be driven to remote code execution through prompt injection, giving attackers app hijacking, data exfiltration, and full system control across widely used developer tooling.
Academic paper "Demystifying RCE Vulnerabilities in LLM-Integrated Apps" (ACM CCS 2024) introduces LLMSmith, a system combining lightweight static analysis and prompt-based exploitation to find and exploit remote code execution flaws triggered via prompt injection in LLM app frameworks like LangChain. The authors uncovered 20 vulnerabilities across 11 frameworks (19 RCE, 1 file read/write), with 13 assigned CVEs (6 at CVSS 9.8), and successfully attacked 17 of 51 affected apps demonstrating data leakage and full system takeover.