Research · curated 23 Jul 2026
Demystifying RCE Vulnerabilities in LLM-Integrated Apps | Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security
First reported acm.org
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
LLM-integrated frameworks that expose code-execution utilities can be driven to remote code execution through prompt injection, giving attackers app hijacking, data exfiltration, and full system control across widely used developer tooling.
Academic paper "Demystifying RCE Vulnerabilities in LLM-Integrated Apps" (ACM CCS 2024) introduces LLMSmith, a system combining lightweight static analysis and prompt-based exploitation to find and exploit remote code execution flaws triggered via prompt injection in LLM app frameworks like LangChain. The authors uncovered 20 vulnerabilities across 11 frameworks (19 RCE, 1 file read/write), with 13 assigned CVEs (6 at CVSS 9.8), and successfully attacked 17 of 51 affected apps demonstrating data leakage and full system takeover.